DPI on ER605 v2 - if on = the internet is running very slowly

DPI on ER605 v2 - if on = the internet is running very slowly

DPI on ER605 v2 - if on = the internet is running very slowly
DPI on ER605 v2 - if on = the internet is running very slowly
2024-11-26 06:19:33 - last edited 3 weeks ago
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.6_20241101(Fix_WG_Reboot_Beta)

Hi all,
I have a question. Why when I turn on DPI on ER605 v2.0, the services YT, FB etc. that I add to the filtering list run very slowly and are quite unusable for browsing the web?
Is the ER605 really weak and therefore needs to be replaced with an ER7206?

 

HW Controler OC200

 

Thank you

ER605,OC200,TL-SG2428P,EAP235,225,115 Wall.
  0      
  0      
#1
Options
1 Accepted Solution
Re:DPI on ER605 v2 - if on = the internet is running very slowly-Solution
3 weeks ago - last edited 3 weeks ago

  @Clive_A Hi,

I'm sorry. My mistake. I had the rules set up incorrectly.

 

 

Here I had blocked services like FB, YT and the like, which I thought that if they were on the list, they were analyzed for statistics. And not that if they were on the list, they were blocked :-((((

 

Now I know that if you only want statistics, you need to turn on what I marked green in the picture :-)

 

 

ER605,OC200,TL-SG2428P,EAP235,225,115 Wall.
Recommended Solution
  0  
  0  
#14
Options
13 Reply
Re:DPI on ER605 v2 - if on = the internet is running very slowly
2024-11-27 00:42:41 - last edited 2024-11-27 00:44:31

Hi @OndrejCZE 

Thanks for posting in our business forum.

How do you configure the DPI?

Too slow to browse the web. This happens to all the websites you visit?

What do you configure in the DNS?

Do you have a video to illustrate the problem with comparison enabling/disabling DPI?

 

YouTube is based on the Google service and if you have blocked anything related to the Google, you will face a problem.

How to Set Up Deep Packet Inspection(DPI) on Omada Router

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#2
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

  @Clive_A Hello,

yes, I did it exactly according to the instructions...

That's why I'm asking if changing from the ER605 to the ER7205 will help in terms of DPI performance.

ER605,OC200,TL-SG2428P,EAP235,225,115 Wall.
  0  
  0  
#3
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

Hi @OndrejCZE 

Thanks for posting in our business forum.

OndrejCZE wrote

  @Clive_A Hello,

yes, I did it exactly according to the instructions...

That's why I'm asking if changing from the ER605 to the ER7205 will help in terms of DPI performance.

It is not answering what I expect.

I want to learn about if there is a performance throttle or not before recommending you upgrade it or not. I cannot diagnose based on the given information.

Like how many devices do you have in the network? If they are session-sensitive? Does it happen to all network devices? Ping to the DNS server or other troubleshooting you've done would be great.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#4
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago - last edited 3 weeks ago

  @Clive_A 

In my network is 50 devices. Of these, about 15 are actively communicating. There are IP televisions, some mobile phones, about 5 PCs... But the internet traffic as such is only 6 mbit per minute on average.

 

Latency to internet is approx 15ms

 

 

ER605,OC200,TL-SG2428P,EAP235,225,115 Wall.
  0  
  0  
#5
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

  @OndrejCZE 

 

DPI is entirely done by software exception and analysis of individual packets.  It makes any 'softrware only' router like the entire TP-link lineup perform poorly.

 

If you check, you will find the 7206 and 605v2 CPU specs are quite similar, and even going to ER707M2 or ER8411 will only marginally improve things.

 

My advice is to forget about DPI on this entire product line if performance matters.

<< Paying it forward, one juicy problem at a time... >>
  0  
  0  
#6
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

  @d0ugmac1 Thank you for the answer. I understand. I'll ask. So how do I do it when I have a router controlled via OC200.
But I also have the option to turn on the controller on the QNAP (CPU Ryzen 7 96GB ram) in docker. Could I run DPI there?

ER605,OC200,TL-SG2428P,EAP235,225,115 Wall.
  1  
  1  
#7
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago - last edited 3 weeks ago

  @d0ugmac1 

 

I'll disagree on that. I have 707-m2 and DPI enabled. No problems with internet speed or general performance when DPI is enabled. 

 

I do see CPU usage peak when transferring huge files at once but it haven't impacted overall performance even once. 

 

IPS is totally different thing - that is really impacting routers performance, but that is clearly said of device's info page as well as ER605 is not supporting that feature at all. 

 

With that said, I'm not claiming that DPI is/should be working on ER605 without any issue/impact on network speed. I haven't tested it on that device myself. 

I just know that it works well on my ER707-M2, opposite to what was said here. 

  1  
  1  
#8
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

  @OndrejCZE 

 

As I understood, the DPI is supported and run by router itself. Therefore controller won't change how it perform. 

But i would rather wait for Clive's confirmation on this. 

  0  
  0  
#9
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

  @OndrejCZE 

 

@RaRu's comment is valid, DPI is less onerous than IPS on the router's CPU, but I lump 'em together and have just disabled them altogether.

<< Paying it forward, one juicy problem at a time... >>
  0  
  0  
#10
Options
Re:DPI on ER605 v2 - if on = the internet is running very slowly
3 weeks ago

Hi @OndrejCZE 

Thanks for posting in our business forum.

OndrejCZE wrote

  @Clive_A 

In my network is 50 devices. Of these, about 15 are actively communicating. There are IP televisions, some mobile phones, about 5 PCs... But the internet traffic as such is only 6 mbit per minute on average.

 

Latency to internet is approx 15ms

 

 

 

 

Internet latency is 15ms? To the DNS server or the default gateway of your WAN(ISP)?

You selected two services and it lags the whole Internet to 6Mbps and deletes them, but DPI is still on, what's the difference?

Would be best to provide a video of this with DPI enabled and disabled. And you run the iperf and ping to your DNS server.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#11
Options