AFP Directory Listings via VPN very slow in Finder

Hello all!
I recently exchanged my existing Apple iMac Core2Duo (with Mac OS X 10.6.8) to a brand new iMac 27" i7 (10.9.4). Besinde to this new iMac I´m using a MacBook Pro 15" (with 10.6.8). WLAN/Airport is turned off; only Ethernet / LAN is used.
My problem right now is: since the upgrade to OS X Mavericks we are experiencing server problems, browsing AFP shares on remote servers (VPN). The Directory Listing is very slow an can take up to 30 minutes for large listings. I can't browse network folders with Finder because it's too slow. It takes forever just list all the subfolders. If I try to transfer or open a file, everything is fine and I can do it at the right speed.
Here's the setup
2 networks are connected thanks to a VPN connection.
All clients, in all connected networks can communicate to a common fileserver (MacPro with OS X 10.6.8 SnowLeopard Server) in Network A
Firewall is not an issue between those networks
The clients authenticate via OpenDirectory and Kerberos to the fileserver
So the problems occur if i want to connect a client on network B to the server on network A. Connection, authentication, ... all good. Even the performance over the VPN, to tranfer files is OK. But browsing subfolders is catastrophic. I used AFP , results are the same. I also made tests on older clients, to see if the fileserver is the problem. 10.6 and 10.8 clients can browse normally, speed is OK.
So my question: What can I do to accelerate the browsing of my AFP/SMB shares for all my Mavericks clients? What can I do to speed up the Directory Listing? And yes: i know about solutions like PathFinder, TotalFinder, .... but i'm more interested in a native solution to this problem.
Thx!!
OS X Mavericks (10.9.4), 10.6.8 Server

This has been a major issue in Mavericks all along. SMB has been a total disaster for anyone who works with MACs on a corporate network, causing admins night terrors, anxiety disorders, and general sadness. 10.9.4 + some server side fixes (smbcreditsmax and smbcreditsmin) fixed many of the issues, but the slow finder listings over VPN connections is still unusable. the only workarounds i know of are:
- switch to windows
- downgrade to mountian lion
- use FTP or webDav protocols
- use a 3rd party finder replacement: mucommander (clunky additional app but works!)
I will be testing Yosemite beta this weekend, i have heard reports that some of this nonsense is fixed.

Similar Messages

WatchGuard S2S VPN very slow

Hi guys,
I have created a site to site VPN between my WatchGuard XTM firewall and MS Azure static gateway. The VPN connects without any issues, but I noticed the file transfer speeds to my servers (via SMB) are very slow. Most of the time it peaks at 350KB/s, sometimes
it hovers around 70KB/s. I have 200Mbps fibre link that is not saturated at all.
sometimes it reaches 3-5MB/s, but it is rare and random.
I'm located in Sydney Australia, the Virtual network is in the UK. I tried to test the Netherlands and Sydney data centres, same exact problem, very poor performance.
Anyone having similar issues with S2S VPNs?
Thanks,
Ib

Hello Code_Jax,
1. Have you created the Azure resources in the same data center region?
2. Is the region that you have chosen close to your On-premise network?
I suggest that you change the region where you have deployed your Azure Resources and check if you get the same Performance.
I also suggest that you use Netmon to and analyze network traffic. You can follow the link below to download Netmon:
https://www.microsoft.com/en-us/download/details.aspx?id=4865
Thanks,
Syed Irfan Hussain

Initializing laptop HD via Firewire very slow

Hi all,
I'm trying to initialize a new 80Gb laptop HD before installing a new copy of Panther on it for installation into a Mac mini. I'm doing the initialization, via a firewire cable and Macally enclosure, to a G4 MDD running Panther 10.3.9 using DiskUtility.
The initialization is very slow, top showing DiskUtility using around 1% of the CPU most of the time. The initialization has been running for 24+ hours and it's still going. The progress bar on DiskUtility has barely moved since it started.
Is the slowness a sign that my firewire port on the G4 motherboard is having a problem?
And can I safely just quit DiskUtility and put the HD back in the mini and do the initialization and installation via the Panther install discs directly on the Mac mini? Or am I stuck with waiting until it ends, since otherwise I'll screw up the partition map on the HD or something?
Any ideas would be greatly appreciated!
Ed

Hi Ed. Be sure in your disk utility the option "safety(s)" is/are not checked. This way the app writes zero
on all your hd blocks and, more, if 7 pass or 35 pass is checked the time will be veeeery long to finish.
Just initialize your disk the standard way, without any other option. You can also check your device integrity before init with the surface scan, this will take up more time but will ensure your device isn't defective. I've formatted many hd through FW cable to external enclosure, succesfully.
regards
Rob

Vpn very Slow

Dear All,
I would like to get help on the following issue.
I have Sage Accpac ERP 5.6 application to run through Remote VPN for some users within a country But this application is very very slow to run . Even upgrade my Internet connection but nothing seems working. I check my MTU size from firewall it was 1500i changed that also to 1300. After Going through this http://www.dslreports.com/faq/695 .
But nothings seems working.
Can I get help from someone.
Thanks A lot,
Rehman Ghani

I think flushing cache would help.

IMac G4 800 mhz internet access via LAN very slow

We have a G4 800mhz running 10.3. Memory is 768K. The only use for this machine is as a music server. It is connected to the internet via LAN; internet access is extremely slow - pages take an incredibly long time to load. Download/Upload speeds are about the same as I see on my Macbook Pro so I don't think it is the connected to the internet. Is there anything one can do to troubleshoot very laggy browser performance?

You may need to turn to Activity Monitor (or "AM") in Applications > Utilities to see if a runaway background process is eating up processor cycles. If you've not run AM before, on first launch its "Show" window defaults to "My Processes." That will tell only part of the story. Change it to "All Processes"to get the full picture.
Now highlight the "%CPU" column to sort by processor usage. Best to check with no user apps running other than AM. Let AM percolate five to ten seconds to let it finish its first poll. What you are looking for are any processes that are using 15 percent or more of "%CPU" with nothing running other than AM. If you find one, post its name here and we can advise how to deal with it.
However, don't get your expectations too high that a process has gone rogue. Part of it is simply a lack of speed by today's standards. I recently upgraded a friends iMac G4 800 from Panther to Tiger so it could run the latest browsers and it was still terribly slow compared to my PowerBook G4 1Ghz running the same level OS. The iMac 800 has a slow logic board bus (100mHz).

Visa communication time via ethernet - very slow?

Hello Everyone,
I am working with an Anritsu MS2722C Spectrum Analyzer and attempting to recieve as fast a communication time as possible. So far, the visa function calls I make ( viPrintf / viBufWrite viReadStr / viBufRead ) seem to be taking roughly 100ms each, much too slow for the project I'm working on.
Does anyone have ideas as to how I can speed up the communcation time to the device in software? It seems like maybe I am missing something in maximizing the efficiency of the VISA library, as it seems to me that the communication time should be much faster than this.
I'm sorry if this question is in the wrong spot or has been already answered, but I didn't see much discussion about library efficiency anywhere.
Thanks,

Hi Ever Song,
Thanks for the response! The real problem I'm having isn't so much with the data transfer rate though, the speed at which the actual data transfer happens is fine (if I were to say, transfer a large file, the operation completes in say 130ms .. only 30ms longer than making a simple call with very little data transfer). So while the jumbo frames are a decent idea, that's more of a low-level speedup for data transfer rates, and I'm not sure it will really help me
I'm speaking in terms of VISA library overhead, or some sort of overhead from establishing a connection, as sending even the simplest command is taking around 100ms. (the call itself blocks for this time). If anyone has had any experience with using the visa libraries (particularly with a spectrum analyzer) I'd really like to hear about what kind of communication times you were able to achieve.
Thanks,
~Chris

Open Directory: users enter accounts very slow

We have Mac OS X Server Snow Leopard 10.6.8 with OpenDirectory and some iMacs with Mac OS X Snow Leopard 10.6.8. After adding Network Account Server in iMacs (System Preferences->Accounts->Login Options->Network Account Server Edit) all works great and users login and anter thir accounts for 5-10 seconds. But some days or weeks later the time for logging and entering their accounts takes for about 5 minutes. If I re-add Network Account Server, then all works greatly again. What's the matter? How to avoid this re-adding?

What do you get when you try to logon?
Does the screen just shake at you?
Can you logon as the diradmin?

First access to mounted NFS share very slow in finder

Hi,
we have some NFS Shares on our Celerra Fileserver mounted by Mac running Snow Leopard 10.6.2 (just updating to 10.6.3).
After a mount of FS in finder, there are approx 600MB loaded from the share on first access. On our LAN it isn't that problem ... but off-site it's very annoying if that amount of data have to go through an small 1Mbit pipe.
Access via Terminal to the same directory doesn't have the problem. Spotlight is disabled with a .metadataneverindex on the root of the share.
Now my question :
Is there any kind of cache, which can be turned of to prevent finder from loading the whole structure / part of files on first access ?
Thanks,
Robert

Thanks for your reply peter.
I have tried , without connecting database, i just hardcoded data values then i tried to access my application at that time it was very fast.
Then i came to conclusion that problem is in some where in data base connection. because my query is also fine tunes.

Link aggregated between NAS and a switch: the Mac as a very slow access...

Hello,
in my Office we're working with Macs and PCs and all the data is on a NAS.
Here is our configuration:
NAS <-link1->Switch<-Link2->Macs or PC.
Macs are connected with AFP protocol (because SMB is very slow).
We want to use Link Aggregation between the NAS and the switch (with 802.3ad procotol) but when we do that all the Macs have a very slow access to the NAS. But all is OK with the PCs.
What can we do? Is there a problem with macOS X and link aggregation?
Thank you for your help.
Nicolas

Sorry, not sure what the question is exactly.
You must have an Xserve, or Ethernet cards capable of Jumbo Frames for one, I assume the Switch & NAS are capable?
Possible clues...
http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c3ha3.html
http://discussions.apple.com/thread.jspa?threadID=1715388&tstart=0
http://www.macnn.com/articles/04/06/21/link.aggregation.for.macs/
http://www.smallnetbuilder.com/content/view/30556/53/
http://www.afp548.com/forum/viewtopic.php?showtopic=8309

Very slow network transfer (AFP, thunderbolt, nas, gigabit, lan, lion)

Hi,
When copying large files (100GB) from my macbook air to my Qnap NAS the transfer is very slow (100kB/s). It becomes immediately much faster (10MB/s) when I lock my session.
The MBA is connected via the gigabit port of the thundrbold display and a gigabit switch to the gigabit port of the NAS.
There is negligible other network activity shown when monitoring NAS or MBA bandwith usage.
So what can limit bandwith of a mac while in unlocked session?
Is the a bug in thunderbolt display dramtically deminishing bandwith when used? Bandwitdth is already high when locked and display shows login screen. It does not need to fall asleep.
Thx

I want to thank you for your help but I think I have to give up. I've been trying for days to get the MBP just to recognise the NFS share. I've tried adding a server in Finder with no luck. I tried Directory Utility with full R/W access setup on NAS, then tried accessing root NAS folder, then the specific share folders, then with specific user enabled on the specific share folders but whatever I try I get nothing. I've changed my local username and password and UID on the Mac to exactly the same one I use for my NAS but it still won't find it and none of the command line options that people suggest do anything at all. I've tried SMB and AFP but they're both sluggish and nowhere near the performance of XP on the same hardware. For an OS that supposedly 'Just Works' I've had a very complicated, tedious and fruitless experience (pun intended). Maybe it's just me because others seem to report no problems accessing their NFS shares or transferring at high speeds with AFP or even SMB but I've had no luck whatsoever. Very frustrating indeed.
Again, sincere thanks for your time and I'll tag the post as answered because for all intents and purposes you answered my question very well. Unfortunately, this Mac just doesn't like me and I don't think I'll be spending money on one anytime soon.

What specifically causes slow directory listings in OS X? Finder, Save As boxes, etc

I have a very specific problem with my laptop in terms of speed. A lot of things happen very quickly on it, especially since I started using tools like Onyx etc to maintain it. But my Finder is notably slower than the machine in general.
To give you some examples, sometimes when I'm in column view and I click on a folder, it can take several seconds before the list of files appears in the next column. When I go to File > Open inside an application, it seems to take forever for the box to be propagated with the list of files in the directory. Changing directories inside a box like this yields the same result, the whole list goes white for several seconds before the new directory appears.
Spotlight has similar issues - it always finds what I want, but it seems to take a very long time. Sometimes it's several seconds before any results appear at all, and other times some results appear straight away (usually applications) but I have to wait considerably longer before documents also appear in the list. Launching applications from Dock can take a while, with apps sometimes bouncing up to 10 times before opening. Interestingly, if I quit an app and relaunch it later, it takes far fewer bounces for it to open, it's only slow the first time I launch after a reboot.
You get the general idea. File and directory listings are very slow, and far slower than almost any other task I want this computer to do.
I've defragmented both used and free space, rebuilt the directory several times, verified with no errors, repaired permissions with no errors, and I'm stumped as to what could be causing this kind of problem. Activity monitor doesn't report that I have any page outs and CPU isn't running high at all so it's not that. I do regular smart checks and surface scans to make sure there's no corruption or anything like that and they consistently tell me everything is fine.
I'm pretty stumped.
MAcbook is a black late 2006 macbook 2,1 with 2GB RAM (max), running 10.6. Also, when I installed 10.6 a couple of years ago it was far faster than it is now, before anyone tells me I simply don't have enough RAM. The computer behaves this way even when it's fresh from a rebook with 75% of RAM free, so that's not the issue.
Any ideas?
EDIT: My SL partition is 100 gigs, 60 used, 40 free. 39.5 contiguous free space in one block, hardly a desperate free space situation...

I used techtool pro, and I did so specifically in the hopes of solving this problem. It does seem to have sped up the computer somewhat, but more in the sense of how quickly it opens and saves files, which when you consider the result of defragmenting seems to make sense. Hasn't helped with this Finder problem in any way whatsoever though, or with the opening of apps from the dock.
EDIT: I don't want to get into a debate about this here as this isn't the subject of this thread, but built in defragmentation only handles files up to a certain size, and when you're a producer like myself working with DV and WAV files which can get into the hundreds of megabytes, that doesn't cut it. The TTP defragmentor specifically lists these files again and again as the ones which fragment, so it's obviously not a totally flawless built in system.
Anyway the slow directory listing issue was present long before I touched the drive with any such tools and the tools made absolutely no difference to that problem, for better or worse.

Data Services Designer - Very Slow on VPN

Hello,
Any idea why Data Services Designer is very slow and many a times goes into Not Responding state. I'm using this client tool to connect to the Data Services Repository + Servers via VPN.
It takes few minutes to load the jobs or to save the changes. Some times hangs.
Wanted to know if anyone is facing similar issues, and any workaround/setup changes to eliminate these delays...
Regards,
Madan
Edited by: Madan Mohan Reddy Zollu on Mar 12, 2010 9:24 AM

Data Services Designer is communicating with the repo (to store/retrieve objects) and the jobserver (to execute jobs and get status/log files) so if there is a slow network connection, response time in the Designer could become problematic.
One way to solve this is use CITRIX or terminal services to have your Designer close to the database and only screens are send over the slow connection. In the Windows installation guide there is a chapter that documents how to setupDesigner in a (multi-user) Citrix environment.

Ssh via vpn: typing commands hangs (is slow)

Hello all,
for a long time i have got an annoying problem and i would like to fix it in the near future.
Establishing an ssh-connection via vpn from my Maxbook tomy FreeBSDsystem works
without any problems: the the password-prompt immediately.
But typing in any commands is very slow, it seems to hang anyhow. Typing with a normal
speed is impossible because all letters after the first letters are missing. After 1-2 seconds
the appear and i could keep on typing.
Erasing is the same: i hit the key and it takes a while until the letters are disappearing.
It remembers me a little bit at the keyboard-settings of MacOS itself: there you can configure
the speed and so on.
Has anybody an idea how to fix this?
Here some general annotations:
1) it is MacOS independent (10.5. and 10.6)
2) is is FreeBSD idenpedent (8.0 and 8.2)
3) it is terminal-application independent (MacOS-terminal and 3rdparty terminal).
Thank you very much, Stefan

Hi Darren,
The user's vim session dies when the users are actively typing.
As for there being a firewall or NAT device between the workstation and the server, yes, there is. The users are in one building and the server is housed in a datacenter in a separate building. The users do not have this issue with out other Solaris 8 and Solaris 10 servers...only this one particular server. A traceroute to the server takes only 5 hops and returns quickly.
As for the logs, I just checked /var/adm/messages and it is reporting the following types of messages over and over.:
[ID 317013 daemon.notice] bpcd[11746] from some IP
I think these messages are generated from Veritas Netbackup which is administered by a separate team than what I am on, but I can have them investigate.

The problem is with the new operating system and sending photo via email when used in my iPad. From photo I selected 3 photos to send via email. I choose the upload key and choose to send by email. Typing text on the email is very slow.

The problem is with the new operating system and sending photo via email when used in my iPad.
From photo I selected 3 photos to send via email. I choose the upload key and choose to send by email. Typing text on the email is very slow. This is solved by saving the email as a draft and opening the email again from mail.
Can you amend he system to allow emails to be sent from photo as previously.

Have you tried restarting or resetting your iPad?
Restart: Press On/Off button until the Slide to Power Off slider appears, select Slide to Power Off and, after the iPad shuts down, then press the On/Off button until the Apple logo appears.
Reset: Press the Home and On/Off buttons at the same time and hold them until the Apple logo appears (about 10 seconds). Ignore the "Slide to power off"

Can connect via VPN, but can't access AFP server on same Xserve

Hi:
I've set up our XServe with MacOS X Server 10.5.2 to do AFP and VPN (L2TP only; PPTP is disabled). The XServe is a standalone server, not connected to any other direstory server.
I can connect to the XServe's AFP server from my Mac over our wired and wireless network. The AFP server shows up in the sidebar of Finder windows. So far, so good.
I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret.
But I cannot connect to the XServe itself to use Server Admin or AFP (using afp://server.company.com or afp://xxx.xxx.xxx.xxx via the Go > Connect to Server command).
The error I get while connecting to the 10.5.2 AFP server is Some data in apf://server.mycompany.com could not be read or written (Error Code -36 ). I saw this error associated with a SMB problem in 10.4.x, but SMB is not running.
Other iChat users in my office also do not automatically show up in the Bonjour list when I connect to the network. Other computers on our network do not appear in the sidebar of a Finder window. (I'm told these are to be expected, as Bonjour isn't supported (in the "local area Bonjour" over a WAN link - it's purely a multicast feature on the network in the office, and won't be routed across the VPN link. True?)
Now, here's the odd part. There is a second server (v10.4.11) on our network running AFP. I can connect to it (using afp://server.company.com via the Go > Connect to Server command) and mount its various sharepoints via the VPN.
The only thing I see in the VPN log that seems amiss is this (but I have no idea what it means):
Tue Mar 11 23:09:27 2008 : Unsupported protocol 0x8057 received
--Both the 10.5.2 and the 10.4.11 servers have DNS properly configured (though our ISP; we're not running our own DNS).
--Both servers and the client have public IP addresses and have the same subnet mask. Network Utility confirms this while connected to the VPN.
--NAT is not running. The ISP is responding with public IPs for the servers.
--The firewall for the 10.5.2 server is not running (but will be once I get this all working).
--The IP address range for the VPN server doesn't overlap our DHCP pool (which also currently uses public IP addresses).
--Any user can access any service.
--No network routing definitions have been set up.
--In essence, I've followed the steps on Pages 141-142 of the Network Services Admin Guide.
One other note: After I connect, the Network Preferences > VPN > Advanced > TCP/IP window shows the IP address for the client just fine (assigned from the VPN pool), but lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?
I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server.... And I'm not sure why I would have to if I can already successfully connect to the 10.4.11 AFP server .
What simple step am I missing?
TIA,
mm

"I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret."
I suspect you mean UDP ports and you might need UDP port 1701 open too.
You only need IP protocol 50 (ESP), protocol 51 (AH) isn't used. And ESP is only used when client and server isn't behind NAT (when NAT is used only the UDP ports are used).
"Unsupported protocol 0x8057 received"
This is usually seen when you can't get GRE through but since you don't use PPTP I can't be sure why this is registered in the logs. Sometimes when connecting using PPTP you have to disconnect and then reconnect for everything to work - you might try this for L2TP too.
But if you already can reach services on any LAN nodes through the VPN I wouldn't bother with it.
As you have a firewall in front of the server you need a second alias IP on the server that you can use to get at the services running on the server through the VPN. The firewall blocks all ports protocols not opened - that's why you can't use the server main IP even if the VPN is up.
The netmask is used by all nodes to determine how big your subnet is: what part of the IP number is the network number and what range the node number is in => really: should traffic be directed to a node on the same LAN or sent directly to the gw/router for forwarding.
What you can't do is connect from a NATed network to another NATed network that both are using the same network number. (That's why people should stay away from using the "default" 192.168.0.0/24 and 192.168.1.0/24 networks for VPN server LANs).
Try your settings at http://www.jodies.de/ipcalc to see what I mean.
"...lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?"
Yes. The VPN server is the VPN gw/router.
"The firewall for the 10.5.2 server is not running (but will be once I get this all working)."
If you already have a firewall in front of your servers that is a bit redundant.
"--No network routing definitions have been set up."
"I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server"
You need routing definitions if you want to setup a split tunnel VPN or all traffic is routed through the VPN when connected. The VPN becomes the default gw.
Without ipforwarding ON in the server you can only reach nodes on the server LAN - not Internet.
DNS is needed for your servers forward and reverse names/IPs for advanced services but doesn't need to run in any of your own servers.
If you decide to do a split tunnel VPN config (adding public and private routing definitions) a reachable DNS IP for VPN clients (in VPN config on server) is needed for VPN clients or they can't use names to find anything. To reach this DNS IP if public/not on your server LAN, you need your server to forward IP DNS lookups and have a routing definition for it.
A split tunnel VPN only send traffic for your server LAN through the VPN and all other traffic directly to the local gw/router (Internet).

AFP Directory Listings via VPN very slow in Finder

Similar Messages

Maybe you are looking for