In short the speedtests when using eBlocker on a client the bandwidth is impacted too much.

Testing using Windows client, https enabled, cert added to firefox where the tests are made.

Test sites speed.cloudflare.com and fast.com.

eBlocker version 4 up to date. On a VM. First 2 GB memory, increased to 3 GB (yes not a multiple of 2) but when on 2 GB the usage peaked only to 90%. Removed the firewall from the virtio NIC, I am using VirtIO NIC as is the most performant. I have tested increasing to 2 and 4 queues for this NIC. MTU is same as bridge. 

For CPU it was as per the VM definition with x86-64-v2-AES but I have also tested with "Host". The host cpu is modern Ryzen 5.

Results: eBlocker enabled on client, 10 Mbps. eBlocker paused for device, 160 Mbps fast.com, 128 speed.cloudflare . ISP contract 510 Mbps.

WiFi connection on 5 GHz band (channel 116), link speed 961/1081 Mbps, 802.11ax protocol. Sec: WPA3-Personal.

This particular corner of the house doesn't get full speed despite strong signal so the question is not why not full 500 Mbps but why 10 Mbps with eBlocker, 160 Mbps without ? Of course there will be a hit from doing MiM inspection but is this 16 X impact expected? Not a complaint, only wanting to understand and if there are suggestions on what to check.

Perhaps some background information first: I have been using eBlocker for years. I originally purchased the white cube and have been very satisfied with it.

Since switching to the UniFi network (Cloud Gateway Fiber incl. various access points and switches), I have been experiencing unstable internet access when eBlocker is active as a DNS server and filtering traffic. The DHCP server is the UniFi router (before the switch—most recently a FRITZ!Box 5590 with Wi-Fi via Apple Airports—I used eBlocker as the DHCP server).

I have installed eBlocker 3 on a Raspberry Pi 4, which I used successfully for years. In addition, as part of my problem analysis, I purchased a Raspberry Pi 5 with 8 GB RAM and installed eBlocker OS 4 on it. Both eBlockers basically work. Both use the ISP’s DNS server or 8.8.8.8 as a custom DNS.

Currently, I am experimenting with eBlocker 4 only. eBlocker running OS3 is shut down.

However, when I set the IP address of the primary DNS on the UniFi router to the eBlocker, things become unstable. Websites load sporadically (not systematically) extremely slowly or not at all (browser error messages indicating that the internet connection has been interrupted). Games such as Mario Kart Tour on the iPad get stuck during startup, even though all referenced pages are whitelisted in eBlocker. When I perform manual recording, I no longer see any accesses where eBlocker is “enabled.” Nevertheless, the app refuses to work.

HTTPS is enabled on all devices and the certificates are installed. When I run functional tests, I only see “green check marks” everywhere.

I have tried all kinds of configurations. In no setup have I achieved a stable network with eBlocker integrated. Listing everything here would go beyond the scope and, in my opinion, would not be very helpful anyway.

If I remove eBlocker from the network (shutdown), the network runs very well and very fast—albeit with all the usual disadvantages that come with that.

I would now like to try again in a more systematic way, ideally with the help of eBlocker experts. I would not consider myself a beginner, but I am certainly not a networking expert either.

Maybe someone here can still help me—I am close to giving up. Thanks in advance!

since a few days I have problems with Youtube.

The browser says "no Intenet connection" while trying to connect to Youtube.

Browser testet Firefox, Chrome, Edge on Win11 an Ubuntu 24.04 LTS

I switched off HTTPS, DNS Firewall, pausing EB nothing changed 🤔 

Other Websites are working very well 👍 

Wenn I get eBlocker out and go directly Youtube ist working.

The next step was my Eblocker 4 Test put in my Network, updated to 4.0.3 the same issue.

Nameresolution ist working well on Router and Client.

Is it possible that there ist a problem with an Update???

regards

PIO

The problem remains even after complete new installation of eBlocker-OS on new SD-card.

Viewed through Fritzbox 7590 (192.168.178.1) the eBlocker-IP-adresses seem to change by themselves: From "192.168.179.5" (instead 192.168.178.x while an IPv4-address is shown as 192.168.178.61), then it changes back to 192.168.178.1 (same as Fritzbox) - so it looks like a conflict of IP-Addresses between eBlocker and Fritzbox (?)

My settings (private relay etc.) are all correctly set.

The problem already turned up with the old eBlocker box, when all of a sudden the eBlocker-address was shown as 192.168.178.1 = Fritzbox address (with Fritzbox as DHCP-server) with loss of access to the dasboard. Then I bought a raspberry Pi, installed eBlocker OS, at first all seemed to work well, I assigned a fixed (unique) IP-address to eblocker (192.168.178.2), but after changing the network settings of eblocker back to automatic DHCP-address reception the "192.168.178.1"-problem returned ...

Is eBlocker working at all under these circumstances?? 

When iPhone was deactivated on dashbord the search could happen. 

Configuration profile was added. Certificate was activated. No change in behavior. HTTPS was also activated in eBlocker, no change. EBlocker is attached to a Fritz Box 7590.