Traffic graph shows 2X the actual traffic on VLAN interfaces.
built on Wed Sep 11 18:16:50 EDT 2013
em0 - wan interface
em1_vlan10 - private lan interface
em1_vlan20 - DMZ lan interface
One PC on private lan is streaming video from Internet. As can be seen in attached screen shot traffic on private LAN interface is roughly 3mbps but graph shows 6mbps!!! Why does graph show twice the actual traffic?
WAN interface shows correct traffic at about 3mbps on graph.
#2 Updated by Jean Cyr almost 6 years ago
Yes it happens consistently. The HOME interface is one of two vlans configured on the em1 lan interface. The em1 interface itself is not configured in pfsense, only the two vlans.
VLAN_10 To home private network | | EM1_VLAN10 | |--------
WAN -----|EM0 EM1|--------------| Managed switch | | pfSense | EM1_VLAN20 | |-------- To DMZ server
#3 Updated by Jean Cyr almost 6 years ago
Sorry, that picture didn't come out so well. Essentially I have a two port pfSense box. One port is LAN and one port is WAN. Since I need to have a safe DMZ on a separate subnet (both IPV4 and IPV4), I don't use the LAN port directly, but instead configure two VLANS on it, one private and one public. The LAN interface is then connected to a managed switch to distribute each VLAN to a separate switch port. One is connected to my DMZ server and is visible on the Internet by public IP and the second is for the internal private home network.
Hope that helps. Only speculating, maybe whatever component you use to extract the traffic level is summing EM1 traffic with EM1_VLAN20 traffic thus counting it twice?
#17 Updated by Andy Sayler about 5 years ago
As Renato says, this is still present as of at least the Wed Sep 03 16:56:44 CDT 2014 2.2 Alpha snapshots. On my system, it seems as though the output traffic is always doubled. I've attached a screenshot showing a data copy first from DMZ to LAN and then from LAN back to DMZ and you can see the respective output lines doubled in both cases.
I'm using VLANS and LACP, all over gigabit IPv4.
#19 Updated by Adam Thompson over 4 years ago
As a temporary workaround, would it not be possible to detect VLANs and do something like disabling the graph, automatically dividing by 2, or just plastering a warning on the graph that these numbers are not accurate?
Also, what is it actually showing? Is that the actual output of the underling parent interface? If so, that's a number I've often wished pfSense could display, particularly since my parent interfaces are LAGGs and I don't have an easy way to see aggregate bandwidth through the system.
#20 Updated by Ermal Luçi over 4 years ago
- Status changed from New to Confirmed
http://fxr.watson.org/fxr/source/net/if_vlan.c?v=FREEBSD10#L1182 is the issue.
To be decided how to solve.