Hi all,

This morning we upgraded our 7 2927’s to 4.4.0 FW and our Axxence monitoring is now alerting us to dropped packets and high ping times frequently on a couple of the upgraded routers (but not all) across our VPN tunnels.

All 7 routers essentially have a mirror config bar the IP addressing.

I can’t seem to record any dropped packets with manual ping tests and other manual monitoring, despite testing for hours, yet Axxence ping tests still seem to be alerting us to dropped packets and ping spikes.

I saw the recent post on here regarding the suspected ICMP blocking with 4.4.0. Could it be related or is anyone else seeing dropped packets across their VPN tunnels on the 4.4.0 FW?

Thanks

If anyone else is seeing similar then we have found that turning off the Data Flow Monitor has helped a lot.

We saw the note in the release notes that mentions performance issues with Data Flow Monitor and Hardware acceleration, and although all of our routers have HW acceleration turned off, turning the DFM off also definitely has helped.

We are still seeing several alerts from our monitoring software (ping spikes and packet loss) over a 24 hour period but no where near as many as when the Data Flow Monitor was enabled.

The 4.4.0 firmware definitely seems to have some serious performance issues.

https://forum.draytek.co.uk/viewtopic.php?t=24616

Very similar experience with a 2865ac & 4.4

https://forum.draytek.co.uk/viewtopic.php?t=24656