oh6hfx
Getting the hang of it
I have Zyxel USG-20 firewall/router with 4G connection in my home office and Ubiquiti UAP-AC-Lite as wifi access point.
In my android phone I have gDMSS Plus installed with 18 devices. I know DMSS is the new app which should be used, I have it installed, but I still use mainly gDMSS, so let's focus in that now.
Past weeks I have started experiencing weird lag in my home network. The dl/ul speed and ping are ok, but still there can be moments when loading a web page ends up with error, and then after 20-30 seconds it works again.
I started to investigate this further. I wrote down the time when the lag happened, and searched USG20 log files. Seems that there is around 400 connections per second coming to my public IP and firewall is blocking them.
Lines look like this (ips masked with xx, first source, then my ip):
2024-03-21 19:52:14,xx.219.47.177:58620 ,xx.93.xx.94:14507 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:58620 ,xx.93.xx.94:14497 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:34378 ,xx.93.xx.94:13611 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:34378 ,xx.93.xx.94:13620 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.151.78.91:55897 ,xx.93.xx.94:22495 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
This lasts around 10 seconds and seems to be enough to get USG20 to struggle. And goes on after 5, 10 or 20 minutes again.
When I looked the source IPs with whois/ripe I can see that they are coming from the devices that are in my gDMSS. I see familiar ISPs and I can check what public IPs those devices have.
When I turn off wifi in my phone, this flooding stops.
What is gDMSS doing? I have push notifications on in only two of the devices, and still it seems to be being busy with every device in gDMSS.
This happens even gDMSS is not used - during the night, whenever connected to wifi..
In my android phone I have gDMSS Plus installed with 18 devices. I know DMSS is the new app which should be used, I have it installed, but I still use mainly gDMSS, so let's focus in that now.
Past weeks I have started experiencing weird lag in my home network. The dl/ul speed and ping are ok, but still there can be moments when loading a web page ends up with error, and then after 20-30 seconds it works again.
I started to investigate this further. I wrote down the time when the lag happened, and searched USG20 log files. Seems that there is around 400 connections per second coming to my public IP and firewall is blocking them.
Lines look like this (ips masked with xx, first source, then my ip):
2024-03-21 19:52:14,xx.219.47.177:58620 ,xx.93.xx.94:14507 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:58620 ,xx.93.xx.94:14497 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:34378 ,xx.93.xx.94:13611 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.219.47.177:34378 ,xx.93.xx.94:13620 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
2024-03-21 19:52:14,xx.151.78.91:55897 ,xx.93.xx.94:22495 , notice ,firewall ,ACCESS BLOCK , wan1 , ,udp , Match default rule, DROP
This lasts around 10 seconds and seems to be enough to get USG20 to struggle. And goes on after 5, 10 or 20 minutes again.
When I looked the source IPs with whois/ripe I can see that they are coming from the devices that are in my gDMSS. I see familiar ISPs and I can check what public IPs those devices have.
When I turn off wifi in my phone, this flooding stops.
What is gDMSS doing? I have push notifications on in only two of the devices, and still it seems to be being busy with every device in gDMSS.
This happens even gDMSS is not used - during the night, whenever connected to wifi..