DPI Function makes some Internet Sides loading extremly slow

DPI Function makes some Internet Sides loading extremly slow

DPI Function makes some Internet Sides loading extremly slow
DPI Function makes some Internet Sides loading extremly slow
a week ago
Model: ER8411  
Hardware Version: V1
Firmware Version: 1.3.6

I noticed (already a while ago) when I turn the DPI function of my gateway on some sides, such as the one from "Kärcher" or "Automobilwoche" take forever to load.. even when in the VLAN of the device were I try to access the site, no filtering is enabled.

I want to use the the DPI function as AD & Analytics blocker, the function works well just some websites such as the ones I named take forever to load.

Not sure maybe it is related to the MTU issue I found earlier on the ER8411? Since the thing with the sides load forever is a bit similar?

 

Home: 1x ER8411, 1x SG3428X-M2, 1xSG2210P, 2x ES205GP,1x EAP-775 Wall, 1xEAP773, 1x EAP772 EU, 2x EAP653 EU, 1x 650 Desktop EU External: 1x ER7412-M2 Controller: OC220 v1
  0      
  0      
#1
Options
5 Reply
Re:DPI Function makes some Internet Sides loading extremly slow
a week ago

Hi  @Julian2111 

Thanks for posting in our business forum.

May I ask what is your network topology?

Can we check the configuration screenshot of the DPI as well? Except for the mentioned websites, other websites work well when DPI enabled?

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#2
Options
Re:DPI Function makes some Internet Sides loading extremly slow
a week ago - last edited a week ago

  @Hank21 Yes other websites work absolutely fine. Just with the ads blocked when the filter list I created (with all analytic & advertising apps) is enabled.

Interesting, on my remote site (Gateway is the ER7412-M2), the issue exists as well. 

That is all that happens, just a loading icon without something happening. As you can see Firefox displays TLS-Handshake with XXX will be established/ carried out. 

That is how my settings look (for both sides). 

Even when I deselect all restrictions the issue still happens, nothing else is configured in between.

The PC is connected to the SG3428X-M2 (on the remote side directly to the Gateway) and the switch via SFP+ to the Gateway.

DNS is the Gateway, iPv6 is disabled.

Home: 1x ER8411, 1x SG3428X-M2, 1xSG2210P, 2x ES205GP,1x EAP-775 Wall, 1xEAP773, 1x EAP772 EU, 2x EAP653 EU, 1x 650 Desktop EU External: 1x ER7412-M2 Controller: OC220 v1
  0  
  0  
#3
Options
Re:DPI Function makes some Internet Sides loading extremly slow
Thursday

Hi  @Julian2111 

Thanks for your valuable feedback.

Is it meaning that these specific websites cannot be loaded even DPI disabled?

If so, did you try to access the websites on your phone with data turned on, or use PC when connecting to the hotspot from phone?

You may try to setup the DNS under your Internet to 8.8.8.8 or other frequently used public DNS servers. Or you can try to decrease the MTU value as well in the same place.

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#4
Options
Re:DPI Function makes some Internet Sides loading extremly slow
Thursday

  @Hank21 

No, when turned off entirely everything works completely fine.

When I enable the function itself, but with no filter lists enabled, the sites do not load anymore.

Changing the DNS does not change something.

I will try the MTU thinggy these days.

Home: 1x ER8411, 1x SG3428X-M2, 1xSG2210P, 2x ES205GP,1x EAP-775 Wall, 1xEAP773, 1x EAP772 EU, 2x EAP653 EU, 1x 650 Desktop EU External: 1x ER7412-M2 Controller: OC220 v1
  0  
  0  
#5
Options
Re:DPI Function makes some Internet Sides loading extremly slow
Monday

  @Julian2111 

Hi, can you pls., out of curiosity, also test the CoBa onlinebanking start page (commerzbanking)? This is one of my test sites. Since updating to 1.36 I am having the same issue as you. For commerzbanking Firefox in the status line indicates TLS handshake runing. Page finally loads, but it takes veeeery long until the login page is shown (also some elements show first and then elements come bit by bit).

No difference here if DPS is on/off. 

Thanks!

  0  
  0  
#6
Options