pfSense

Hi there,

We experience an issue with downloading speeds being very slow over IPSec. The uploads speeds are okay, but downloading generally does not exceed 30Kb/sec.

We have a road warrior setup and the client is the default VPN client in Mac OSX Yosemite. Our PFsense box is running the following version:
2.2.5-DEVELOPMENT (amd64)
built on Tue Aug 11 01:28:24 CDT 2015
FreeBSD 10.1-RELEASE-p17

The CPU usage is when downloading is generally not above 1%. The PFSense box has an 100Mbit up/down link and so does the internet connection of the client.

We have "Enable MSS clamping on VPN traffic" enabled at 1280 to be certain but an analysis with ICMP pings doesn't show an issue with the default MTU size.

We use the following configuration:
Phase 1:
Mutuals PSK + XAuth
Phase 1 encryption: AES 128 bit, SHA1
DH Key group: DH2
NAT Traversal: Force

Phase 2:
ESP
Encryption algorithm: AES 128 Bit
Hash: SHA1
PFS Key group: off

Can someone please help debug this issue? It is slowly driving me mad...