Bandwidth before and after firewall upgrade

Discussions about Internet service providers (ISPs), the Meetinghouse Firewall, wired and wireless networking, usage, management, and support of Meetinghouse Internet
Post Reply
CleggGP
Church Employee
Church Employee
Posts: 118
Joined: Mon Jul 28, 2014 1:55 pm

Bandwidth before and after firewall upgrade

#1

Post by CleggGP »

Upgrading an existing Meetinghouse Firewall increases the firewall data throughput potential up to 240% (see estimate in the table below). Of course meetinghouse Internet access speed is also limited by the ISP bandwidth.

Possible firewall data throughput (in Mbps)
Firewall Model // Before* // After**
881-W // 0 to 20 Mbps // 0 to 68 Mbps
C881-W // 0 to 35 Mbps // 0 to 68 Mbps
C881 // n/a // 0 to 80 Mbps
C891F // n/a // 0 to 200 Mbps
--------
* Before firewall upgrade or new firewall activation. (N/A = "not applicable")
** After firewall upgrade or new firewall activation.
Notes:
  • 1. The C881 and C891F meetinghouse firewall models were introduced after the new firewall configuration.
    2. Most meetinghouses only need a 881 series firewalls (due to limited ISP bandwidth)
User avatar
Mikerowaved
Community Moderators
Posts: 4734
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

#2

Post by Mikerowaved »

[Moderator note: This post was split off to a new topic, since it was different enough from the previous thread.]

A couple of questions:
  • Who is your ISP and what's their advertized throughput?
  • Were your measurements taken wired or wirelessly?
  • Was the building unoccupied when your measurements were recorded?
  • Were you able to measure the throughput directly from the modem (bypassing the firewall) before and/or after the upgrade?
Thanks.
So we can better help you, please edit your Profile to include your general location.
CleggGP
Church Employee
Church Employee
Posts: 118
Joined: Mon Jul 28, 2014 1:55 pm

Re: Bandwidth before and after firewall upgrade

#3

Post by CleggGP »

Mikerowaved wrote: A couple of questions ...
The data originates from Cisco testing in a hard-wired test environment. The configuration upgrade significantly reduces CPU load of the firewall, thus allowing more cycles for routing network packets.
User avatar
Mikerowaved
Community Moderators
Posts: 4734
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

#4

Post by Mikerowaved »

OK, the above numbers came from Cisco. I've heard these figures tossed around before, but I've never known the source. Actual throughput in a production environment might vary quite a bit from Cisco's lab numbers, depending on the number of services enabled, IPSec, VPN, etc. The best way to know what these firewalls are capable of is to load them with with your own script and test them in your own setting.

These are my measurements, tested in 3 different buildings, before and after the firmware upgrade.
(All tests performed in an empty building, hardwired, using speedtest.net.)

Firewall: Cisco 881W
ISP: UTOPIA Fiber
Advertized throughput: 100 Mbps (up and down)
Measured throughput without the firewall: very close to 100/100 Mbps
Measured throughput with the firewall running the OLD script: Just under 50/50 Mbps
Measured throughput with the firewall running the NEW script: Just under 100/100 Mbps

Not going to get much above that for the 881W, since it uses 10/100 switches in its ports. :)
So we can better help you, please edit your Profile to include your general location.
icepop77
New Member
Posts: 1
Joined: Sun Apr 12, 2015 6:41 am

Re: Bandwidth before and after firewall upgrade

#5

Post by icepop77 »

Sorry to post on a somewhat dated thread, but we've experienced chronically slow speeds since the upgrade. It comes and goes, but for the most part we're seeing less than 1mb down when I run a speed test at dslreports. Our meetinghouse is connected through Comcast, locally funded/installed wireless infrastructure, church provided Cisco hardware; although performance is consistent between wired/wireless. I can gather more info, but I'm hoping to see if there is a known issue with performance
User avatar
Mikerowaved
Community Moderators
Posts: 4734
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: Bandwidth before and after firewall upgrade

#6

Post by Mikerowaved »

That certainly doesn't sound right for Comcast. Sometime when the meetinghouse is empty, connect a PC right to the Comcast modem and retest the speed. If it's still slow, you found the problem. You might also try power cycling the modem and see if that helps.
So we can better help you, please edit your Profile to include your general location.
rolandc
Member
Posts: 257
Joined: Tue May 15, 2012 8:20 pm

Re: Bandwidth before and after firewall upgrade

#7

Post by rolandc »

would also like to see a speedtest done directly connected to the cable modem
Roland
russellhltn
Community Administrator
Posts: 34422
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: Bandwidth before and after firewall upgrade

#8

Post by russellhltn »

icepop77 wrote:Sorry to post on a somewhat dated thread, but we've experienced chronically slow speeds since the upgrade. It comes and goes, but for the most part we're seeing less than 1mb down when I run a speed test at dslreports.
Forgive me if I'm stating something you already know, but the speed tests can't distinguish between a limited connection and one where all the available bandwidth is being taken by other members. That's why the suggestion to test when the meetinghouse is empty.

You might want to take the usage reports from tm.lds.org and see if the slow times correspond to a peak or lull in bandwidth usage. Keep in mind the times are in GMT/UTC. You can download a report that spans about 2 days with data at 10-minute increments.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.
Post Reply

Return to “Meetinghouse Internet”