internet upload speed issue

[siddu099]

Hi Team,

In our production environment, we have three Windows machines in VLAN 10.10.20.0/24, and the gateway is configured on a virtual Check Point Firewall running on the KVM (Red Hat) platform.

We are facing an internet upload speed issue. During the speed test, we are getting around 1 Gbps download speed but only 0.22 Mbps upload speed.

We are unable to identify the cause of this issue. Your support will help us to resolve this at the earliest.

 

[the_rock]

The only way to say reliably its NOT the fw issue would be to take it out of the "picture" and see what you get. If that gives you the right speed, then you know the cause of the problem. Otherwise, its really just speculating.

[siddu099]

Hi rock,

we tested with out firewall we are getting both upload and download of 1GB 
when traffic pass through firewall we are getting this issue

thanks
siddu

[the_rock]

K, thats more than fair, that tells us 100% it is indeed the fw thats the issue, Any relevant logs you can send? Im thinking could also be issue with MTU size, though thats not always obvious right off the bat.

You can go through cpview utility and see if there are interface errors, or simply run below:

[Expert@CP-GW:0]# ethtool -S eth0 | grep err
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts tx err: 0
hdr err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
pkts rx err: 0
err: 0
[Expert@CP-GW:0]#

[siddu099]

Hi Rock,

MTU 1500 on vm and fw ethernet

ethtool -S eth0 | grep err
[Expert@CHECKPOINT:0]# ethtool -S eth0
NIC statistics:
rxq0: rx_packets: 2016921242
rxq0: rx_bytes: 2855909517559
txq0: tx_packets: 474924282
txq0: tx_bytes: 104933478077
[Expert@CHECKPOINT:0]# ethtool -S eth0 | grep err
[Expert@CHECKPOINT:0]#

[the_rock]

What do you see below?

 

[the_rock]

Unable to view it, says virus scan in progress.

[siddu099]

CPVIEW.Overview
------------------------------------------------------------
Overview SysInfo Network CPU I/O Software-blades Hardware-Health Advanced
------------------------------------------------------------

CPU:
Load average: 0.10
Num of CPUs: 4

CPU Used
1 10%
3 10%
2 9%

------------------------------------------------------------

Memory:

Total MB Used MB Free MB
Physical 15,799 3,917 11,882
FW 13,429 1,695 11,734
Swap 8,191 0 8,191

------------------------------------------------------------

Network:

Bits/sec 1,710K
Packets/sec 384
Connections/sec 0
Concurrent connections 45

------------------------------------------------------------

Disk space (top 3 used partitions):

Partition Total MB Used MB Free MB
/ 20,470 9,284 11,185
/var/log 44,010 7,759 36,250
/boot 290 44 231

-------------------

[the_rock]

That looks right to me.

[siddu099]

when we remove lan gw from firewall connect to our cloud edge we getting both upload and download same speed

[the_rock]

As a test, I would try change MTU size to say 1400 and test, but if no change, up it to say 1600 and see. If no luck either, than try way higher, say 5000 and see what happens.

[siddu099]

But in our cloud edge having same mtu 1500 as firewall and vm but there is no issue  

[the_rock]

Yes, but this is VM, totally different "beast".

[Jan_Kleinhans]

Did you try other upload tests like uploading to dropbox or google drive? Maybe it's only an issue with speedtest.net because of some inspection running.

Regards,

Jan

[siddu099]

We tried all the method but no luck we are checking with ISP