Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[burakkucat]

For anyone interested, moving my WAN connection to the ONT from the built-in 2.5G copper WAN interface on the UDM-Pro SE to a UF-RJ45-1G SFP 1G SFP module in the 10G SFP+ slot took the performance with medium IDS/IPS settings from 750-800Mbps back up to full line rate - now hitting 918/110 even with high IPS/IDS settings.

Thank you for your latest update.

That is an interesting result, which shows there are at least two different "lanes" towards the internals of the UDM-Pro SE. One used by the 2.5Gbps metallic interface and a second used by the 10Gbps SFP+ interface.

[bogof]

Thank you for your latest update.

That is an interesting result, which shows there are at least two different "lanes" towards the internals of the UDM-Pro SE. One used by the 2.5Gbps metallic interface and a second used by the 10Gbps SFP+ interface.

I did do a bit of digging at the command line.  The SFP connections are connected direct to the SOC from AnnaPurnaLabs - you can see they use the AnnaPurnaLabs driver.  The 2.5G copper is a Realtek 8125 PCI express LAN chip. The internal 1G switch is another Realtek device, but connected directly to the SOC via MII or similar I think...

I don't think this difference in hookups makes a huge difference, but it's enough to go from quite a bit below line rate to line rate with IDS/IPS enabled.  Logging into the unit and monitoring it I can see that with IDS/IPS enabled during speed testing the unit is passing traffic at line rate but the CPU is pretty maxed out >95% on some cores.

I'm sure if I was making extensive use of things like the network video recording functionality in the UDM that I'd probably once again not quite reach line rate.

[Alex Atkin UK]

I guess the reputation of Realtek NICs having higher CPU overhead is still true.

[bogof]

Well, this is the gift that keeps on giving!

After a couple of weeks of stellar performance from BTW connection, "something" has happened which appears to have spread the lacklustre performance onto the BTW connection now.

What's odd is that max performance achieved has simultaneously increased.  So whereas I was pegged at 918Mbps previous, I'm now hitting up to 932Mbps to some particular segment or similar - that Norwich speedtest server 9060, for instance, but most other places are no-where near line rate.

Anyone else on Zen seeing similar?

[Alex Atkin UK]

Its looking really consistent here at 915, right now at least.  I was even able to hit 855 over Wireguard.

I can't really comment on real-world as the only thing I know of that allows line rate are Steam downloads.

[bogof]

Its looking really consistent here at 915, right now at least.  I was even able to hit 855 over Wireguard.

I can't really comment on real-world as the only thing I know of that allows line rate are Steam downloads.

Ho hum, will have another look this evening.  Do you know what gateway you're on at the moment?
Cheers

[Alex Atkin UK]

Ho hum, will have another look this evening.  Do you know what gateway you're on at the moment?
Cheers

vt1.cor2.lond2.ptn.zen.net.uk

[Chrysalis]

Sorry for jumping in :-)

This is a bit of a concern, as repeated nightly outages would be very unusual - I can take a look if you like? PM me (either via forum or on our IRC) if you like...

As for Zen's network, I'd not be surprised if they connect to CityFibre at multiple local POPs around the country and then run that traffic over their own national network to reach their core POPs. We're smaller, so rather than having multiple links we have a connection to CityFibre in London and CityFibre give us access to their (English) network via that link.

Yep sure I will PM you, sorry only just noticed this.

[skyeci]

Well, this is the gift that keeps on giving!

After a couple of weeks of stellar performance from BTW connection, "something" has happened which appears to have spread the lacklustre performance onto the BTW connection now.

What's odd is that max performance achieved has simultaneously increased.  So whereas I was pegged at 918Mbps previous, I'm now hitting up to 932Mbps to some particular segment or similar - that Norwich speedtest server 9060, for instance, but most other places are no-where near line rate.

Anyone else on Zen seeing similar?

Not seeing any issues on my service (btw) & since implementing zen's static ipv6 config opnsense has been perfect. Using dhcp ipv6 I was constantly losing ipv6. Now 2 weeks static for ipv6 not one issue. No loss of London gateway either.

[bogof]

vt1.cor2.lond2.ptn.zen.net.uk

Thanks.  I was on that gateway at the time and was getting poor results.
After a few gateway drops and reconnects I finally picked up one that appears to be doing line rate to most places for me.
lo0-0.bng1.ixn-lon.zen.net.uk

I don't know where exactly the issue is, but I'm getting pretty sick of it.

[bogof]

You honestly can't make this up.  My performance took a dirt dive tonight back to about half line rate, I rebooted the router and it wouldn't connect up over PPPoE, and neither would a laptop.  Called Zen, after a while on hold they reset something, and it went back to working (albeit still slow).

Did a bit of gateway hopping, and couldn't seem to get on the gateways I was expecting to see...  Log in to Zen portal, and sure enough, I've just been migrated BACK to the GEA service from BTW....  A new unrequested migration order has appeared in my account.

Unbelievable. 

[burakkucat]

Log in to Zen portal, and sure enough, I've just been migrated BACK to the GEA service from BTW....  A new unrequested migration order has appeared in my account.

Unbelievable.

If that had happened to me, it would now be a "Goodbye Zen and don't try to charge me" letter, sent to the company's registered address.

[bogof]

If that had happened to me, it would now be a "Goodbye Zen and don't try to charge me" letter, sent to the company's registered address.

The email's gone in to their cancellations team already.  If the response isn't positive it's going "postal"...

It's not bad enough that they moved me back onto GEA, but that their systems for doing it obviously didn't do a full job, leaving me without valid authentication into some of their servers, is just the cherry on the cake. 

Obviously I'm not going to say everyone's experience of Zen is going to be like this, as clearly from other posters that isn't the case; but I think it merits a very clear BUYER BEWARE.  As far as I can see at least some of it looks to be held together with chewing gum.

[Alex Atkin UK]

Very disappointing (to put it mildly), it rather suggests when there is a problem they have no way to block the automatic migration from going through again.  Your account should absolutely have been flagged for not making any changes without consulting you first, at the very least.

[bogof]

Very disappointing (to put it mildly), it rather suggests when there is a problem they have no way to block the automatic migration from going through again.  Your account should absolutely have been flagged for not making any changes without consulting you first, at the very least.

Or maybe they do have such an ability and just forgot to enable it on my account.  Who knows.  It's all pretty ludicrous, though.