This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Another slow upload problem

Hi,

My issue, like apparently many other have had, is that the upload speed on my UTM is far below expected.

I'm running a Sophos UTM with a home use license on a Core i5 laptop with one internal and one PCI Express GB ethernet adapter.

When I connect a pc directly to the (bridged) cable modem, I get the full 150/15Mbit speeds up/down.

When connected through the Sophos UTM download speeds are perfectly fine but the upload speeds are about half of what is expected (7.5Mbit).

Obviously I've disabled everything that I could think might be interfering. So, no IPS, no Web Filtering, no threat protection, no nothing, just a bare firewall setup with 1 fw rule:

internal -> any -> any

and some masquerading.

I've completely reinstalled the firewall from scratch, and again but with the internal and external interfaces swapped. I've tried with a different (old) device I had lying around, I've tried setting the external interface to 1000Mbit/full and to 100Mbit/full, but none of these things have helped.

I'm at the end of things I can think of.

I've not played with the MTU settings, since I have no idea how to do that right and I've read about others that had 'arp issues' with their provider, this is also beyond the scope of my knowledge..

Please advise.



This thread was automatically locked due to age.
Parents
  • Hi Daaf,

    Take SSH to UTM and execute this command as root. Verify what speed do you capture here.

    wget --no-check-certificate -O - https://raw.github.com/sivel/speedtest-cli/master/speedtest_cli.py | python

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  •   OT alert

    One of the things I always hate about this command, while useful, is that the user is reliant on the speedtest_cli.py script to not have been compromised or otherwise modified.  It is somewhat risky to blindly download a python script from the internet and then pipe it through python without inspecting it (or any script for that matter, be it python, bash, whatever).  If, for instance, I had compromised the github repo where it is stored and added rm -Rf, and the user was silly enough to be running as root on the UTM, what then?  For the user, hopefully nothing TOO bad if they had backups.  But, since this is being recommended by Sophos, they may have some liability in this.  Perhaps Sophos should develop their own script to duplicate this effort and host it themselves on the up2date server and monitor the script for unauthorized changes, etc.?  Just a thought.

Reply
  •   OT alert

    One of the things I always hate about this command, while useful, is that the user is reliant on the speedtest_cli.py script to not have been compromised or otherwise modified.  It is somewhat risky to blindly download a python script from the internet and then pipe it through python without inspecting it (or any script for that matter, be it python, bash, whatever).  If, for instance, I had compromised the github repo where it is stored and added rm -Rf, and the user was silly enough to be running as root on the UTM, what then?  For the user, hopefully nothing TOO bad if they had backups.  But, since this is being recommended by Sophos, they may have some liability in this.  Perhaps Sophos should develop their own script to duplicate this effort and host it themselves on the up2date server and monitor the script for unauthorized changes, etc.?  Just a thought.

Children
No Data