WAN bandwidth peaks of 1.5Gbps

Forum|Forum|1 year ago
March 4, 2025
2 replies
1330 views

Hi all,

We are seeing some strange peaks in our WAN bandwidth. Every 20 minutes, we get a peak of around 1.5Gbps which lasts for about 1 minute. We can not figure out what is doing this.

We did a packet capture when the peak is going, but when looking in wireguard -> statistics -> conversations, we can only see 5 things that are around 15Mbps. To IP addresses that are not being used in any VIP.

How can we further troubleshoot this?

Edit: We've also checked all firewall rules comming into the fortigate, but none of them are producing this many Gbps..

AEK

SuperUser

Hi Jesper

Try enable logs for the implicit deny rule and check again. Probably the peaks are for incoming packets that are being blocked.

Also check in the local traffic logs as well.

AEK

JesperAPAuthor

New Member

I've enabled the implicit deny rule logging now, I have to wait for the next peak.

If it is this, how can we prevent it from peaking to 1.5Gbps, because of this we are paying around 300 euro's monthly to burst fees as we only have 100Mbps bandwidth..

Local traffic log is empty..?

AEK

SuperUser

Lets see in the logs then we can decide what to do.

But if it is blocked traffic from a source that is not controlled by you, then you can't do anything about that. You can just continue to block it and pay for it.

Local traffic log should not be empty. Try enable it in log settings.

AEK

SuperUser

I think you are right.

Can you check the graphs of all other interfaces? In case you find an interface having the same peak at the same moment that would mean you have found at least to which local network this traffic is going.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded