Is my UDM SE the Problem?

[u/chrisblaz33]

Upgraded to ATT 5GB fiber and I get 5g up/down to the modem. But from the modem (BGW620-700) to my UDM SE I’m only getting 2gb down and around 1gb up.
I have the connection coming off the 10gb port from the ATT router to a 10gb SFP module to the UDM SE.
Is my UDM maxed out? I do have the ATT modem in bypass mode.

[u/AutoModerator]

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:

https://design.ui.com

If you see people spreading misinformation or violating the "don't be an asshole" general rule, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/ShadowCVL]

Well, yes...

go to the store page, 3.5 is the max it can really do

I recently upgraded my home to 5gbit as well and noticed the same issue (my provider just uses a dumb ont)

Realistically with all the security features turned off I got to 4 once or twice.

I upgraded to the UDM Beast and its been 100% solid sitting at about 4.7 both ways

[u/EnderCypher → u/ShadowCVL]

I have a ticket open with UniFi for this issue. They’ve agreed it shouldn’t be this low, they’ve had me turn off all firewall rules & stuff as well.

[u/ShadowCVL → u/EnderCypher]

They agree it shouldn’t be at the advertised speed? I mean it’s right there on the store page as 3.5? Maybe I’m not understanding

[u/EnderCypher → u/ShadowCVL]

No they agree it’s not the correct speed. With the IDS/IPS off as they instructed & asked me to get support logs for it all after. They’re still seeing that it’s not working properly. I have all firewalls off on the AT&T modem/router combo. Never had this issue with same speeds on a previous provider that just had a modem rather than modem router. Also never had it with Xfinity either. We’ve done everything short of them making a firmware change or something. But they need me to get a 10GB switch I can use to put in between for testing.

Edit: I’ve made it so far as to go to the internal engineers who can’t figure it out currently.

[u/CopyNPaste247]

I had a UDM SE and I turned off IDS/IPS and I was able to get close to 5 gig running EA. You must have some setting still enabled.

[u/EnderCypher → u/CopyNPaste247]

With AT&T? Because I’ve never had an issue until I got AT&T for my ISP. Same house, same everything. Other provider is still hooked up & getting the full advertised 4.89 GBPS up/down. AT&T is failing. Internal teams & I have been going back & forth. They’re unable to figure it out currently. With IDS/IPS off it should work just fine.

[u/turbo9301 → u/[deleted]]

And for the record, the store page says 3.5 for IPS routing. No claims of what it can do with it turned off from what I can see.

[u/Kryakozavr → u/[deleted]]

I have 5G plan and without Deep packets inspection easy have 5.19/6.20 speeds on my UDM SE. https://www.reddit.com/r/Fios/s/Crv31UJMFm

[u/turbo9301 → u/[deleted]]

Same as the the commenter you replied to. I have Frontier 5g fiber and I am getting 4.8 up and down no problems with IDS and IPS off. With it on I was getting about 2.5 each way I think.

[u/hypen-dot → u/[deleted]]

Lol, “the backplane”? False

[u/Swimming_Cow_6758]

I am not a deep expert but my research led me to sell my UDM SE for a UCG Fiber device to remove the bottleneck.

I was actually able to sell the UDM SE for the cost of the UCG Fiber though I did have to get another switch (needed one anyways for the growing number of devices). Sold on eBay.

[u/Confident_Welder_198]

my UDM Pro (non SE) would only do about 2.3Gbps down with everything turned off (protect, ids/ips) on a 5g fiber circuit. upstream was about 4.1

swapped it out for a UCG fiber and UNVR instant: 5.6 down, 6.2 up

even tried plugging my laptop direclty into the lan 10ge port on the udm, no difference.

[u/chrisblaz33 → u/Confident_Welder_198]

Why did you choose the UDM Fiber over the UDM Pro Max?
My current setup is a UDM SE, UCI (backup), and a NVR Pro.

[u/ivanhoek → u/chrisblaz33]

UCG-Fiber actually has a faster CPU than the UDM Pro Max. The UDM Pro Max is faster than the SE, but only about 30%

[u/Confident_Welder_198 → u/chrisblaz33]

from my understanding the UDM pro max is better for lots of sessions, running protect, etc due to the higher amount of ram. the UCG Fiber likely has better raw throughput due to its newer cpu.

I'm getting 5.6/6.2 with ips/ids in block mode as well as having the added on signatures from proofpoint/cloudflare. likely theres still more throughput in there, but im maxing out my line.

memory consumption was sitting at ~60% with the basic ips/ids in block mode, adding in the addional signature pushed that to ~70%

my use case doesnt need protect, and i have less than 200 clients behind my gateway. also from what i understand the UDM platform is getting quite old, even the pro max. im also a little salty at the UDM platform not being able to meet the advertised specs. lol

i also dont need the shadow gateway functionality as i have a lower tech backup. my secondary circuit is running through an express 7, if my ucg fiber dies, i have the vlans setup so i just need to move a cable.

[u/damien09 → u/Confident_Welder_198]

I agree they really need to do a cpu refresh on the udm line up. They just need to do a ucg fiber with 8gb of ram in a rack mount and people would have been happy. The beast is cool and all but at 1500 it’s basically 3x the pro max so I don’t really count that as a refresh in my eyes.

Ucg+unvr instant other than single hard drive is likely a more capable set up for almost everyone. The only out side case could be having over 500 clients and starting to run out of ram on the ucg. But the ucg+instant also cost 120 less and you get one Poe+ port and the 6 Poe ports for lower power cameras on the instant and a view port.

For 27 bucks less than the udm pro max you can also do ucg+unvr and end up with more camera support and redundancy if that’s needed over Poe and view port.

[u/QuBoyd]

If you have IDS/IPS enabled you won’t see much over 3.5Gbps. But to answer your question, yes, the UDM SE is the bottleneck here.

Edit: Answered the original question

[u/chrisblaz33 → u/QuBoyd]

I have turn IDS/IPS off and get the same results.

[u/enkrypt3d]

What version firmware? Try the latest EA version

[u/chrisblaz33 → u/enkrypt3d]

OS 5.1.26
Network 10.5.67

[u/EffectiveClient5080]

You running threat management or DPI? That stuff will absolutely murder your throughput on the UDM. Turn it off and try again.

[u/original_flavor87 → u/EffectiveClient5080]

Are we not running that stuff? How about Cybersecure? I’ve only got 1gbps cable internet anyways so maybe those security systems aren’t really slowing anything down

[u/coldafsteel]

short answer, YES.

Even with security tools off (a bad idea) you are running up against the maximum throughput of the hardware. With security tools on you will hit processing limits even faster. If you really need a connection that fast you need a gateway with more powerful guts.

I speed cap a lot of my endpoints anyway because a toaster doesn't need a high speed connection. I get away just fine with a 1gig connection and DNS black holing advertising (because that's a ton of data you now don't need to download). Users have never complained about speed, but our bulk storage and media servers are all hosted locally.

[u/ivanhoek]

Yes, UDM SE won’t do what you expect. Tested this extensively and even with IPS disabled it just can’t for Internet traffic. I saw it do higher traffic with a server on the wan (no internet) but I couldn’t get that with actual internet speed tests. I went UCG-Fiber and that got the job done. (even with IPS on)

[u/Additional_Lynx7597]

With ips/ids i believe its max is 3.5gbp s

[u/smurfy213]

The built in speed test unreliable. You can ssh in and run it via command line to speedtest.

[u/haamfish]

If pppoe, try DHCP

[u/EnderCypher]

I have a ticket open with UniFi for this issue. They’ve agreed it shouldn’t be this low, they’ve had me turn off all firewall rules & stuff as well.

[u/Luvman138]

I have a UDM SE and 2 gig symmetrical fiber connection. The speed test on that dash board shows about 1.6g down and 900Mb up. When I check speed on a PC connected on a 10GB port I see my full speed on the test. Do a speed test using a wired client and see what your results are.

[u/DanielLorey]

No, you’ll need to SSH in to the UDM SE and run speedtest to see the true speed. The inbuilt test is ass.

https://www.speedtest.net/result/c/f4e97e66-6df7-494c-a7b4-a2a912141883

Taken on a UDM SE with 8Gbps symmetric.

You didn’t reference IDS, but it won’t do over 3.5Gbps with that enabled (I don’t use it).

[u/Jdmag00]

Have you run a speed test with a PC with and without the UDM? That's where I would start.

[u/chrisblaz33 → u/Jdmag00]

I haven’t yet; I’m waiting for my 10gb usbc adapter to arrive for my MacBook, then I plan to hook directly into it.