pfSense English Support > Traffic Shaping

Traffic shaping tips and tricks.

(1/2) > >>

Let's start collecting tips and tricks.

I just ran into a problem where completely saturating my outbound traffic resulted in new connections being dropped to the web, etc.   On closer inspection I noticed the ACK queues where showing some drops.

When this happens, edit the queues and change the bandwidth from 1% to 5%.

Please post your tips or tricks that have helped out in situations.

Do not post about problems, etc.  Leave those for the other threads.

UPDATE 06/07/06: just ran into this again using the Akamai download manager.  My LAN ACK is running at around 204Kb/s so I needed to increase the LAN acks to 10%.  Everything is fine again.   

Afterwards visit Status -> Queues and pay attention to your drops on the LAN and WAN queues.  Keep in mind that you *WANT* drops on certain queues such as lower priority queues, etc.

I repeat my experience setup Shaping in Bridge mode
This really worked, but only need use certain rules..
1. queques settings as usually for normal Shaping.

2. after shaping wizard, in all rules I change sources and destinations type to *(any).
May be this basic on fact, what Bridge worked in interfaces level? (but filterring by IP possible!!!)
May be insert in types src/dst types items "LAN interface, WAN interface ..." and shape in bridge only for this items (not use any IP address)?

3. in queues name(may be and rules name) can't use special symbols as "~!@#$%^&*()<>{}[]|\=..etc"
normally use for '_'. Dont testing for '-'
My proposal - use for name (a-z A-Z 0-9)and '_'. Not use national symbols!
May be good idea insert hidden ID field for queues and rules & all relationship between them make with ID?
Description it is perceived as comment ...

4. after change name of queue need reselect them in all rules - what connect to this queue. Name dont update automaticly. This really hidden bug. Decision this bug can be with use my proposition in (3)

i don't detaily testing Shape rules for all variants of Src/Dst types. Is '*' - thirst founding worked variant and this i use in my configuration.

for looking what work shape rules i used Filter log (10) item in console menu
if rule worked - then they name writed in respective packets

Another trick.  If you are running m0n0mon and you find that the window "disappears" from time to time then you are surely running out of LAN ACK queue slots.  Increase the bandwidth to 10% from 1% (or 5% if you followed my advice from the first post in this thead).

I'm taking it that what dvserg means, in point #2, is to change every shaping rule from:

--- Code: ---WAN->LAN TCP * LAN net Port: 3724 qGamesDown/qGamesUp m_Game WoW inbound
--- End code ---

to show

--- Code: ---WAN->LAN TCP * * Port: 3724 qGamesDown/qGamesUp m_Game WoW inbound
--- End code ---

Can anyone verify if this works as intended, and/or better?  I'm not sure about the quirks, so I'm a little hesitant to change every single rule on the shaper...

Bridge Shaping:

After this change i have dual Bridge chaping (In and Out).

Generated PF rules use 'keep state' - this create bi-direct 'channel' for connection.
If connection initialized from Lan to Wan (for example browser) - this shaped by
[Lan>Wan] Traffic Shaper rule.
Shaped and incoming and outgoing packets.
Not need create [wan>lan] symmetric rule.
And similarly for connection initialized Wan>Lan - this need only [Wan>Lan] Shaper rules.
Need existing though one [wan>lan] and [lan>wan] rule.
Otherwise corresponding to interface will not is initialized by ALTQ as shaped. (error message generated)
In attachment my rules example.
Marked rule [Wan>Lan]- for avoiding error.

I tested this only my bridged system and all comments only for this situation.


[0] Message Index

[#] Next page

Go to full version