This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

7.501 HTTP proxy - throughput extremely slow

I just installed ASG Software version 7.501 on a P4 2.8ghz with 1GB RAM and two Realtek gigabit ethernet controllers for WAN and LAN. Everything else is working just fine.
I'm trying to utilize the transparent web proxy for AV scanning and caching, but with it on I am taking a tremendous speed hit.
With HTTP proxy off I get 26mbits down at TWC speedtest. With proxy on, I get 10. I've tried various combinations of settings for the proxy (turning off caching, disabling the access log, disabling AV scanning) but whenever the proxy is on, download speeds are slow. It's not only speedtests, but any download. No matter what I do, as soon as proxy is off, speeds go right back up to normal.
I've checked HW reports and CPU usage is never spiking above 40%, mostly its under 10%. (2 spikes to 40% in 12 hours and those were probably during upgrade and/or restarts)
Seems that my box should have plenty of power to sustain 20mbit downloads. Previously this box was working wonderfully with smoothwall. (came back to astaro after the home license chanages(thank you astaro!))
I can't be the only one here.
Any comments or suggestions would be appreciated.


This thread was automatically locked due to age.
  • Goldy, have you tried disabling hyperthreading in the BIOS?
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi.
    I don't see how this would influence the http proxy.
    My CPU is about 15-30% on average.
    Ram - 40-50%
    [:S]
  • I believe Bob is referring to some observed behaviour that other users have experienced; apparently some users that use their own hardware have seen performance suffer if hyperthreading is enabled... sometimes disabling it can have a positive effect, even if you don't have high CPU usage.  It's worth a try.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Goldy...HT in early cpu's was known to have issues in either high load or high throughput situations. Intel themselves said for high intensity aplications disabling HT is the better choice since in the early p-4 versions of HT it wasn't really a full second thread enigine it was just a way to keep the enormously long pipleine of the p-4 full and not having a pipleline stall(which reallllly hurt the p-4's performance).

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • OK, I can see that.

    I have Xeon QC 5320.

    [:)]
  • You have a newer core series based xeon.  I have not heard of any recommendations to turn off HT in those cpu's..so leaving it on should not hurt anything..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow