# Slow loading websites

**URL:** <https://discourse.pi-hole.net/t/slow-loading-websites/3408>\
**Category:** Help\
**Created:** [May 28, 2017, 12:31pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408 "2017-05-28T12:31:40Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![SRaent](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/sraent/32/1456_2.png) [@SRaent](https://discourse.pi-hole.net/u/SRaent)\
**Post date:** [May 28, 2017, 12:31pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/1 "2017-05-28T12:31:40Z")

</div>

I've tried everything in this thread, and still websites like [http://www.computerbild.de/](http://www.computerbild.de/) or [http://www.chip.de/Test\_12430122.html](http://www.chip.de/Test_12430122.html) load extreamly slow. In addition, not all ads are blocked, in fact especially on these sites, there still are lots of ads. i really don't know how to proceed. Currently the speed is unbearabyl slow, like 40 seconds to load 1 page.  
I also have made absolutly shure that i use the PIv6 displayed by ifconfig in the Fritz.box dns server configuration aswell as in the /etc/pihole/setupVars.conf file. The same goes for IPv4.  
EDIT: i also tried this:

> [@Some Websites load very slow](https://discourse.pi-hole.net/t/some-websites-load-very-slow/1876/34):
>
> iptables -A INPUT -p tcp --destination-port 443 -j REJECT

and i have opened ports 443 and 80 to my raspberry pi on my Fritz.box and it makes no difference.  
any help would be greatly appreciated, because in the current state, my pihole is basically unusable

---

<div class="post-metadata">

**Author:** ![Mcat12](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mcat12/32/20_2.png) [@Mcat12](https://discourse.pi-hole.net/u/Mcat12)\
**Post date:** [May 28, 2017, 6:18pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/2 "2017-05-28T18:18:49Z")

</div>

Run `pihole -d` for a debug token. That command is to close those ports and reject traffic, not open it.

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 9, 2017, 1:41pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/4 "2017-06-09T13:41:50Z")

</div>

Hi, a have a same problem like others. Some elements on web sites not aborted and browser waiting and waiting until the timeout expires (about 20sec).  
All problems are on https connection and javascripts at the and of address.  
I read here some threads about this, and understand recommendation to use iptables.

_"sudo iptables -A INPUT -p tcp --dport 443 -j REJECT"_

I try it, but no difference. I mean, that REJECT not work well or something else is wrong.  
Pi-hole is instaled on fresh instalation Lubuntu on virtual machine.  
DNS translate work very well. Pi-hole return own IP, when DNS name is on list, or forward when no. Pi-hole return blank page for most of requests. It work good. Pi-hole Web interface work good too.  
I dont use IPv6, only IPv4. (i think)  
All clients are in local network, with windows OS, with Firefox, Chrome, IE, Edge browsers.  
IP tables was without records. I add only one row about INPUT 443 port with REJECT.

 ![](https://discourse.pi-hole.net/uploads/default/original/3X/9/6/96fa8bb205c3d8ba9effcf9f77907fd138dcd3a0.png)

For examle request :  
[https://www.googleadservices.com/pagead/conversion.js](https://www.googleadservices.com/pagead/conversion.js)  
how it see on picture ...

Thanks someone to have some idea, how to solve this.

---

<div class="post-metadata">

**Author:** ![taich001](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/t/0ea827/32.png) [@taich001](https://discourse.pi-hole.net/u/taich001)\
**Post date:** [June 10, 2017, 5:57pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/5 "2017-06-10T17:57:35Z")

</div>

> [@malina](#):
>
> ients are in local network, with windows OS, with Firefox, Chro

Since 3-4 days I have the same problem. Some sites open incredible slow. Mostly youtube with add trailers. Other videos without add trailers open normal fast.

Some news sites are als incredible slow.  
Whenever "script.ioam.de" is used I will take up to a minute to load the page.

Does anyone know how to overcome this?

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [June 11, 2017, 3:19am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/6 "2017-06-11T03:19:25Z")

</div>

Slow loading sites are and script assets usually are a sign that browsers are requesting from port 443 (HTTPS/SSL) and not getting a reject, but instead are timing out. You could try setting up a firewall or iptables to reject on 443 instead of dropping, do you know if you have any firewalls or iptables set up on the Pi-hole device?

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [June 11, 2017, 3:23am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/7 "2017-06-11T03:23:30Z")

</div>

Thanks. Adding this to my FAQueue.

---

<div class="post-metadata">

**Author:** ![taich001](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/t/0ea827/32.png) [@taich001](https://discourse.pi-hole.net/u/taich001)\
**Post date:** [June 11, 2017, 9:47am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/8 "2017-06-11T09:47:27Z")

</div>

I applied "iptables -A INPUT -p tcp --dport 443 -j REJECT" on pi-hole but there is no change. Still takes 1 Minute to load [http://www.heise.de](http://www.heise.de)

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [June 11, 2017, 9:59am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/9 "2017-06-11T09:59:49Z")

</div>

If you are using IPv6, you would need to add that rule to your `ip6tables` as well.

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 12, 2017, 9:18pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/10 "2017-06-12T21:18:37Z")

</div>

Hello, thanks to all for answers. For me, i add rule about port 443 and REJECT on ip6tables and nothing changed.  
I try this request "[https://gacz.hit.gemius.pl/xgemius.js](https://gacz.hit.gemius.pl/xgemius.js)" it is on ad list, and is piholed

**In https** , browser waiting and stop on timeout. Not answer from Pihole

**In http** , browser gets the answer _var x = "Pi-hole: A black hole for Internet advertisements."_ very quickly.

What i know, is no limitation on connection between client and pihole. Both machines are in private network.  
I try flush iptables and ip6tables on pihole and try to load nothing changed, set one rule to iptables and ip6tables for REJECT port 443, nothing changed.  
I put off personal firewall on windows client too, nothing changed.  
Can i test it somehow ? Is command, where webserver on pihole answer on https ? I dont know for now, how to find, where is fault.  
Thanks to all for the time.

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [June 12, 2017, 9:28pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/11 "2017-06-12T21:28:27Z")

</div>

If you can use the `F12` inspector on your client browser and take a look at the exact call that is causing the timeouts you may be able to see what asset it is that is causing the timeouts. If the browser rendering is blocking and waiting for a response, they typically show as red colored errors during the process.

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [June 12, 2017, 9:30pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/12 "2017-06-12T21:30:26Z")

</div>

As for HTTPS, since that requires a Certificate that matches the domain name to be valid, it's difficult to enable that for the Pi-hole pages. It would be considered a form of a Man In The Middle attack as we would be impersonating the encrypted communications between the browser client and the end server, which should be encrypted from client to server.

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 12, 2017, 10:37pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/13 "2017-06-12T22:37:24Z")

</div>

Hmmm, i understand, it makes sense.  
All long requests, ending at timeout, are on https.  
Then I do not understand why REJECT is not working. Is this function only between Unix systems ? Because my all clients running under Windows OS. It looks like the ICMP response is not returned from pihole firewall to browser to stop wait and end request.

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [June 12, 2017, 10:40pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/14 "2017-06-12T22:40:07Z")

</div>

The command it just on the Pi-hole server itself, the clients should be redirecting their requests for blocked domains to the Pi-hole server, and seeing the REJECT on port 443, they should be immediately stopping the attempt at rendering the asset and continue on with the rest of the page.

Can you post your `iptables` configuration?

`sudo iptables -nvL` and `sudo ip6tables -nvL` and lets see what is configured.

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 13, 2017, 8:10am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/15 "2017-06-13T08:10:52Z")

</div>

Here is my configurations iptables.

**IPTABLES**

 ![](https://discourse.pi-hole.net/uploads/default/original/3X/3/1/319d3ce6556d63aa0b55313fd4969d6f9b10a841.png)

**IP6TABLES**

 ![](https://discourse.pi-hole.net/uploads/default/original/3X/4/a/4a83a49f07338206991eb4d88a0517c96e74dad0.png)

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 13, 2017, 9:03pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/16 "2017-06-13T21:03:24Z")

</div>

I tried to install unix OS (no Windows OS) on another virtual machine, set DNS to pihole and go to on problamatic webpage and ? It works... no timeout error, only connection refused. Webpage loaded quickly.  
It means, that problem is on windows side, or windows OS dont know REJECT ? Can anyone test it ?

---

<div class="post-metadata">

**Author:** ![malina](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/m/779978/32.png) [@malina](https://discourse.pi-hole.net/u/malina)\
**Post date:** [June 14, 2017, 11:44am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/17 "2017-06-14T11:44:43Z")

</div>

I found it, but i dont know, how to fix it.  
Pi-hole REJECT connection only for clients in the same address range as he is. Pi hole answer for all clients on http, but on https no.  
There should be no restrictions on the private network.  
Websites pihole work well for everyone, DNS too..

---

<div class="post-metadata">

**Author:** ![taich](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/t/b782af/32.png) [@taich](https://discourse.pi-hole.net/u/taich)\
**Post date:** [June 15, 2017, 8:12am UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/18 "2017-06-15T08:12:03Z")

</div>

What I found out:

traceroute script.ioam.de  
traceroute to script.ioam.de (10.10.0.12), 30 hops max, 60 byte packets  
1 pihole (10.10.0.12) 0.020 ms 0.005 ms 0.003 ms

traceroute6 script.ioam.de  
traceroute to script.ioam.de (2a01:5740:1000:3301:dee6:8e74:7152:5bc1) from 2a01:5740:1000:3301::12, 30 hops max, 16 byte packets  
1 pihole (2a01:5740:1000:3301::12) 2999.96 ms !H 2998.66 ms !H 3000.02 ms !H

I think slow websites are related with IPv6. If you turn off IPv6 pihole answers like greased lightning. Only IPv6 resolution is slow.

You can see that with script.ioam.de which is blocked by pyhole. Both routes v4 and v6 are resolved by pihole. IPv4 in 0.3 ms and IPv6 in 3 seconds. This is the delay.

Has anybody an idea how to fix this?

---

<div class="post-metadata">

**Author:** ![jacob.salmela](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jacob.salmela/32/8_2.png) [@jacob.salmela](https://discourse.pi-hole.net/u/jacob.salmela)\
**Post date:** [June 15, 2017, 2:21pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/19 "2017-06-15T14:21:22Z")

</div>

> [@taich](#):
>
> I think slow websites are related with IPv6

This is sometimes the case:

> [@Why do some sites take forever to load when using Pi-hole? (for versions \< v4.0)](https://discourse.pi-hole.net/t/why-do-some-sites-take-forever-to-load-when-using-pi-hole/3654):
>
> Update: 2018-08-06 As of v4.0, this should no longer be a problem unless you choose to deviate from the new [default blocking mode](https://docs.pi-hole.net/ftldns/blockingmode/#pi-holes-unspecified-ip-blocking-default) and return to the [IP-based mode](https://docs.pi-hole.net/ftldns/blockingmode/#pi-holes-full-ip-blocking). And the iptables rules mentioned in this article should not be needed. Update As of v3.1 the first reason should not be an issue anymore That being said, there are generally two reasons this happens: your ISP changes your IPv6 address (Global Unicast Address), causing Pi-hole to become misconfigured and timing out when trying…

---

<div class="post-metadata">

**Author:** ![taich](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/t/b782af/32.png) [@taich](https://discourse.pi-hole.net/u/taich)\
**Post date:** [June 15, 2017, 4:28pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/20 "2017-06-15T16:28:20Z")

</div>

After setting the right IPv6 address everything works perfect.

Thanks for your help.  
Thomas

---

<div class="post-metadata">

**Author:** ![oo12](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/oo12/32/1828_2.png) [@oo12](https://discourse.pi-hole.net/u/oo12)\
**Post date:** [August 11, 2017, 10:12pm UTC](https://discourse.pi-hole.net/t/slow-loading-websites/3408/21 "2017-08-11T22:12:51Z")

</div>

I ran into a similar problem. I'm using IPv4 only. Mac and Linux clients would get an immediate "connection refused" for pi-holed https resources, but the same request from a browser on Windows would hang for ~20 seconds before timing out. I was using the iptables REJECT rule given above on the pi-hole server.

However there are several ways to reject a connection. By default iptables will send an ICMP port-unreachable, which Windows seems to ignore. I modified the rule to be **iptables -A INPUT -p tcp --dport 443 -j REJECT --reject-with tcp-reset** which fixed the problem for Windows clients as well as the others.

Possibly Windows Firewall was blocking the incoming ICMP packet and adjusting its inbound rules would have fixed this also.

[Next page](https://discourse.pi-hole.net/t/slow-loading-websites/3408.md?page=2)