Hi Dave,
congratulations for beeing successful now.
I actually think of a timing issue, too, but you did not give enough info to tell more.
Would you please at least share your profile ID? To do that, go System → System information and copy the link.
BTW profile ID of my jetway/intel ipfire is 806fcd1c86aaf3950726e17f7367cc49baff744c.
Best regards
My link is My IPFire
Dave
Thanks, Dave.
I’m quite sure now, that there is a timing issue somewhere in the chain. Because your ipfire hardware is rather slow compared to more modern appliances, an especially the 100Mbit NICs in combination with their counterparts could add critical delays.
To explain it a bit more: Some ten years ago, when I at home did the big step from a dual core Atom N330 (2x1,6GHz) still running Windows XP to an Ivybridge i7 CPU and Windows 8, I could not open the WUI of my ADSL modem/router no more. It turned out, that the modem/router was too slow on WUI interface, and after I could show the problem at my local ISP’s shop, they at last offered me another device, that they had tested, but did not sell officially. With that modem/router I was happy, until I could book the 50Mb VDSL, that I use today.
Back to your ipfire hardware, I’d suggest, not to rely on good old parts, even if you can get them work so far. My most important reasons are:
Older CPUs than i-core are missing some instruction set extensions, that speed up CPU handling of throughput. Especially the AES new instructions are more than a nice-to-have, if you are going to use encryption facilities like VPN.
As an ipfire appliance is running upto 24/365, power consumption is of concern. So I use the jetway NU591 SBC with a N3160 4 core CPU, which at power line draws clearly below 10W. And I’m experimenting with an ARM appliance, to reduce power consumption even more.
I do not suggest, to throw your good old Optiplex away, I just don’t think, that it’s the right hardware for ipfire. Ever thought about using it as a NAS, e.g. for backing up your main NAS and/or your PC(s)?
Best regards
Johannes
I dont use the built-in 10/100 ethernet port. The addon pci network card is a dual 10/100 card. One port is red the other green. The router is 1000 capable. The broad band service tests out at 30Mbps. The network, PCs and swtches are all 1000Mbps. Most of the network traffic is PC to PC via the 1000Mbps switches.
Frankly the system is very lighty loaded 90% of the time and it should hardly notice DNS requests IMHO.
Dave
Is the addon networl card pci or pcie?
But anyway, if the router is 1000 capable and the ipfire hardware not, then there may be a basic issue, depending on whether the router checks LAN speed once only or repeatedly.
And frankly no. That the Optiplex is very lightly loaded is no indicator for delay times, it may add.
As you did not post any ping results yet, it’s very hard to tell something more concrete.
Best regards,
Johannes
Thanks all for useful advice.
Dave
I find that anyplace that has that Comcast Security Edge nightmare, I need to switch to TLS so Comcast isn’t grabbing all my DNS traffic which Comcast does no matter what DNS is listed. It probably wouldn’t be so bad if they were using Comcast’s DNS’s (75.75.75.75…) but I think they’re still using akamai’s DNS which tend to be stale. Isn’t the TLS hostname for 1.1.1.1 “one.one.one.one” ?
