Bandwidth before and after firewall upgrade

Discussions about Internet service providers (ISPs), the Meetinghouse Firewall, wired and wireless networking, usage, management, and support of Meetinghouse Internet
CleggGP
Church Employee
Church Employee
Posts: 98
Joined: Mon Jul 28, 2014 12:55 pm

Bandwidth before and after firewall upgrade

Postby CleggGP » Thu Mar 12, 2015 2:13 pm

Upgrading an existing Meetinghouse Firewall increases the firewall data throughput potential up to 240% (see estimate in the table below). Of course meetinghouse Internet access speed is also limited by the ISP bandwidth.

Possible firewall data throughput (in Mbps)
Firewall Model // Before* // After**
881-W // 0 to 20 Mbps // 0 to 68 Mbps
C881-W // 0 to 35 Mbps // 0 to 68 Mbps
C881 // n/a // 0 to 80 Mbps
C891F // n/a // 0 to 200 Mbps
--------
* Before firewall upgrade or new firewall activation. (N/A = "not applicable")
** After firewall upgrade or new firewall activation.
Notes:
    1. The C881 and C891F meetinghouse firewall models were introduced after the new firewall configuration.
    2. Most meetinghouses only need a 881 series firewalls (due to limited ISP bandwidth)

User avatar
Mikerowaved
Community Moderators
Posts: 3131
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

Postby Mikerowaved » Fri Mar 13, 2015 9:35 am

[Moderator note: This post was split off to a new topic, since it was different enough from the previous thread.]

A couple of questions:
  • Who is your ISP and what's their advertized throughput?
  • Were your measurements taken wired or wirelessly?
  • Was the building unoccupied when your measurements were recorded?
  • Were you able to measure the throughput directly from the modem (bypassing the firewall) before and/or after the upgrade?
Thanks.
So we can better help you, please edit your Profile to include your general location.

CleggGP
Church Employee
Church Employee
Posts: 98
Joined: Mon Jul 28, 2014 12:55 pm

Re: Bandwidth before and after firewall upgrade

Postby CleggGP » Mon Mar 16, 2015 2:53 pm

Mikerowaved wrote:A couple of questions ...

The data originates from Cisco testing in a hard-wired test environment. The configuration upgrade significantly reduces CPU load of the firewall, thus allowing more cycles for routing network packets.

User avatar
Mikerowaved
Community Moderators
Posts: 3131
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

Postby Mikerowaved » Mon Mar 16, 2015 10:13 pm

OK, the above numbers came from Cisco. I've heard these figures tossed around before, but I've never known the source. Actual throughput in a production environment might vary quite a bit from Cisco's lab numbers, depending on the number of services enabled, IPSec, VPN, etc. The best way to know what these firewalls are capable of is to load them with with your own script and test them in your own setting.

These are my measurements, tested in 3 different buildings, before and after the firmware upgrade.
(All tests performed in an empty building, hardwired, using speedtest.net.)

Firewall: Cisco 881W
ISP: UTOPIA Fiber
Advertized throughput: 100 Mbps (up and down)
Measured throughput without the firewall: very close to 100/100 Mbps
Measured throughput with the firewall running the OLD script: Just under 50/50 Mbps
Measured throughput with the firewall running the NEW script: Just under 100/100 Mbps

Not going to get much above that for the 881W, since it uses 10/100 switches in its ports. :)
So we can better help you, please edit your Profile to include your general location.

icepop77
New Member
Posts: 1
Joined: Sun Apr 12, 2015 5:41 am

Re: Bandwidth before and after firewall upgrade

Postby icepop77 » Sun Apr 12, 2015 5:46 am

Sorry to post on a somewhat dated thread, but we've experienced chronically slow speeds since the upgrade. It comes and goes, but for the most part we're seeing less than 1mb down when I run a speed test at dslreports. Our meetinghouse is connected through Comcast, locally funded/installed wireless infrastructure, church provided Cisco hardware; although performance is consistent between wired/wireless. I can gather more info, but I'm hoping to see if there is a known issue with performance

User avatar
Mikerowaved
Community Moderators
Posts: 3131
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

Postby Mikerowaved » Sun Apr 12, 2015 6:28 am

That certainly doesn't sound right for Comcast. Sometime when the meetinghouse is empty, connect a PC right to the Comcast modem and retest the speed. If it's still slow, you found the problem. You might also try power cycling the modem and see if that helps.
So we can better help you, please edit your Profile to include your general location.

rolandc
Member
Posts: 257
Joined: Tue May 15, 2012 7:20 pm

Re: Bandwidth before and after firewall upgrade

Postby rolandc » Sun Apr 12, 2015 10:03 am

would also like to see a speedtest done directly connected to the cable modem
Roland

russellhltn
Community Administrator
Posts: 20732
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Bandwidth before and after firewall upgrade

Postby russellhltn » Sun Apr 12, 2015 12:13 pm

icepop77 wrote:Sorry to post on a somewhat dated thread, but we've experienced chronically slow speeds since the upgrade. It comes and goes, but for the most part we're seeing less than 1mb down when I run a speed test at dslreports.

Forgive me if I'm stating something you already know, but the speed tests can't distinguish between a limited connection and one where all the available bandwidth is being taken by other members. That's why the suggestion to test when the meetinghouse is empty.

You might want to take the usage reports from tm.lds.org and see if the slow times correspond to a peak or lull in bandwidth usage. Keep in mind the times are in GMT/UTC. You can download a report that spans about 2 days with data at 10-minute increments.
Have you searched the Wiki?
Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.


Return to “Meetinghouse Internet”

Who is online

Users browsing this forum: No registered users and 1 guest