pfSense Support Subscription

Author Topic: L7 Traffic Shaping required resources  (Read 1135 times)

0 Members and 1 Guest are viewing this topic.

Offline demoso

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
L7 Traffic Shaping required resources
« on: December 23, 2011, 10:39:50 am »
I want to build an L7 Traffic shaping transparent firewall.  I tried this on a P4 system and it blew up the processor.  I tried again on a Pentium D 2.8ghz dual core and I've seen it run up to 50% with 2 test PC's browsing.  I'm planning on deploying this in a 30 client user environment.  Just looking for some recommendations on specs for the box.  Do you think the Pentium D should be able to handle it?

Thanks!

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2753
  • Karma: +0/-0
    • View Profile
Re: L7 Traffic Shaping required resources
« Reply #1 on: December 23, 2011, 12:38:47 pm »
Because you have an dual core CPU there is only 50% max CPU usage. This is because there is no multi-threading for all processes in pfsense. It is not a problem of pfsense but of the process itself.
In short this means one CPU is maxed out.

But what do you like to filter with L7 ? Such a high usage is a little bit strange for my understanding.

Offline demoso

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: L7 Traffic Shaping required resources
« Reply #2 on: December 23, 2011, 12:50:37 pm »
I'm sending mp3, httpvideo, httpaudio, flash, http-itunes, http-rtsp, quicktime, rtp, and rtsp to the qotherlow queue and I'm blocking audiogalaxy.