Emby server experiences network traffic anomalies daily after 5 PM

[BIgdongdong1028 6]

My Emby server experiences network traffic anomalies every day after 5 PM, characterized by unresponsive data and a sudden drop in outgoing data traffic to just a few Mbps. Normally, the server sends data traffic at several hundred Mbps to 2 Gbps due to high traffic from users accessing the server. This issue persists until 12 AM, after which everything returns to normal. I have checked for all hardware issues and found no abnormalities. I have also reinstalled the Emby service, but this has not resolved the issue. The problem has been ongoing for about two weeks now and remains unresolved. Could anyone please help me?

Edited July 21, 2023 by BIgdongdong1028

[rbjtech 5284]

If this is traffic ingress, then unless another scheduled task is running taking all your upload bandwidth, I would point the finger at your ISP throttling your upload speed.

[BIgdongdong1028 6]

17 hours ago, rbjtech said:

如果这是流量入口，那么除非另一个计划任务正在运行占用您所有的上传带宽，否则我会将矛头指向您的 ISP 限制您的上传速度。

There are no other programs occupying the upload bandwidth. The picture I posted above is the total bandwidth monitored on the network interface

[BIgdongdong1028 6]

This is the normal network traffic condition. I suspect it might be caused by human intervention, as it occurs at a fixed time every day from 5 pm to 12 am.

[BIgdongdong1028 6]

Let me add some more information

 

1. After 5 pm, not all programs stop sending traffic. Everything works fine when I use iperf or other programs, but there is no traffic for Emby.
2. The lack of traffic is not constant, but intermittent. There is no traffic for one minute, and then there is traffic for the next minute

Does anyone know how I can troubleshoot the problem？

[pwhodges 2012]

Do the Terms and Conditions for your ISP mention either "fair use" or throttling?  Given the times during which this happens, throttling still seems the likely explanation.  The behaviour of different programs doesn't invalidate this, as the ISP will most likely have routines which enable speedtest traffic to be prioritised and streaming to be downgraded, for example.

Paul

[BIgdongdong1028 6]

3 minutes ago, pwhodges said:

Do the Terms and Conditions for your ISP mention either "fair use" or throttling?  Given the times during which this happens, throttling still seems the likely explanation.  The behaviour of different programs doesn't invalidate this, as the ISP will most likely have routines which enable speedtest traffic to be prioritised and streaming to be downgraded, for example.

Paul

Because the possibility of ISP throttling streaming has been ruled out, as everything works fine when I use Plex.

[pwhodges 2012]

You hadn't said.

Are either/both Plex and Emby accessed through http or https?

Is Plex connecting directly, or via the Plex servers?

Perhaps you could upload an Emby log covering the period at issue, as it might be possible to see whether there's something actually going on within Emby related to this.

Paul

Edited July 22, 2023 by pwhodges

[BIgdongdong1028 6]

42 minutes ago, pwhodges said:

You hadn't said.

Are either/both Plex and Emby accessed through http or https?

Is Plex connecting directly, or via the Plex servers?

Perhaps you could upload an Emby log covering the period at issue, as it might be possible to see whether there's something actually going on within Emby related to this.

Paul

Thank you very much first. Since the log files contain a lot of sensitive information, I have sent you a private message.

[BIgdongdong1028 6]

45 minutes ago, pwhodges said:

You hadn't said.

Are either/both Plex and Emby accessed through http or https?

Is Plex connecting directly, or via the Plex servers?

Perhaps you could upload an Emby log covering the period at issue, as it might be possible to see whether there's something actually going on within Emby related to this.

Paul

Both PLEX and Emby are accessed through http. Additionally, PLEX is directly connected, and I access it directly through PLEX on MacOS, rather than using an application like Infuse. However, whether accessing Emby directly or through Infuse, I experience connection drops.

[pwhodges 2012]

I've replied in a little more detail by PM, but your log has periods when the server's 206 responses take 10 or even 20 seconds instead of a fraction of a second.  There is activity immediately before this which concerns me, but I can't say authoritatively that it is the cause.  After a bit the server issues simultaneously a load of similar (slow) 204 responses to 14 clients, and the timings return to normal.

(Edit - not 14, but double that or more - I didn't look past the other log lines in between)

I'll look some more tomorrow, but can't today.

Paul

Edited July 22, 2023 by pwhodges

[Luke 42083]

HI, can you please provide the log file in it's original plain text format? thanks.

[BIgdongdong1028 6]

On 7/23/2023 at 3:23 AM, Luke said:

HI, can you please provide the log file in it's original plain text format? thanks.

Thank you very much for your reply. I have identified the issue on my end. It should be an ISP or data center problem. I was able to resolve it by changing the IP and port for the Emby server. Thank you again!

[rbjtech 5284]

17 hours ago, BIgdongdong1028 said:

Thank you very much for your reply. I have identified the issue on my end. It should be an ISP or data center problem. I was able to resolve it by changing the IP and port for the Emby server. Thank you again!

That was my reply back on 21/07 ...

The ISP was probably throttling 8096 and/or 8920 - by using 443 - they are unlikely to throttle this as it's standard https web traffic.