Anyone with any ideas?

LoboTiger

Well I figured it out. For some reason I had to change the rule to "ANY" protocol from "TCP/UDP".

It was working with the protocol "TCP/UDP". Don't know if the update broke it.

Thanks for the feedback this sets me in the right direction. I can grab several USB Ethernet adapters and plug in some bridges. Personally I love the TP-Link nano travel routers.

Actually all the phones and the modem have unlimited data. But sharing a 3G connection with up to 15 devices can really slow things down. We have been using our phones to help alleviate the demand on the modem, but we also want access to our local servers at the same time. And now that Sprint installed LTE right next to us…

Again thanks for the help!

Thanks for the response Ermal, I will give it a go.

@Adam2104:

QoS works perfectly fine in pfsense. I have it configured on mine. The trick is getting your rules configured correctly.

Would you please share your setup?

NAT, traffic shaping, firewall rules (floating, lan, wan), nat outbound auto or manual and which/when static port, siproxd or no?  does one assign queues to created firewall rules lan/wan or rely on floating rules?  traffic shaping to retain use of 100% download/upload bandwidth (I don't p2p, but I do usenet ssl), highest prio for voip (sip/rtp), default everything, higher(imap,jabber), lowest (usenet ssl, or p2p for those who do)

that would be very helpful, thanks :)

yes, limiters and traffic shaping in pfsense are 2 separate things. What you are looking for seems to be traffic shaping. I don't know much about limiters only that they are rather dumb in what they do. Meaning they just limit bandwidth based on an overall. Traffic shaper I think would be a better fit for what you are trying to accomplish.

The only secure way is to use a transparent HTTP proxy or regular HTTP proxy and deny CONNECT to untrusted sites. Only trusted clients should be given routed/NATed access to the Internet. If any kind of routed connection to the outside is possible, BitTorrent can be made to bust through.

Squid have self traffic settings.
Use Traffic shaper for different protocols, then http (not squid traffic).

All PC's are given access to internet individually through firewall. Some PC's only need access for antivirus updates, checking mail, light browsing. Then, other PC's interact with customer services and online research, in addition to checking mail, antivirus updates. Last set of PC's do torrents.

So, I need to set 3 types of limiters, for light, medium, and large users, then assign those limiters to individual rules on the firewall. Yes, IP addresses are fixed.

@pratchaya:

My ADSL router hv 12000/1200 kbps speed .
( 12M/1M )

Looks normal but enter; for 12000/1200 kbps speed
1024 Uoload
12288 Download

I would like one also. Just purchased an ooma on sale from newegg and would like to use it on my lan running from my pfsense box :)

I partially solved my problem. So I answer my own question  :D

I was messing with traffic shaper wizard, I found out that, if I create same queue name on both WAN and LAN, lets say qP2P, and if I set a floating rule for P2P traffic and set its queue name qP2P ( without ackqueue, its important). Download traffic goes to LAN's qP2P and upload traffic goes to WAN's qP2P, ack packets also goes to these queues. So I solved my own problem.

But I couldn't solve my latency problem entirely,
If I fully saturate upload (WAN traffic) my latencies dont get affected that much. I have read that WAN traffic is the one that we can control, the traffic that we can actually control by prioritizing packets or dropping, it is the the traffic that we create. On the other hand, download traffic is the one that we cannot control directly, someone could send us packets and we cannot stop it until it reaches our pfsense router.
So my problem starts here, when i fully saturate my download traffic, latencies start to go high, not high as 600ms or 900ms but 200-250 ms.
I'm testing latencies with ping command, i gave it highest priority, i tested different schedulers, for both LAN and WAN, I couldn't solve this problem.
Traffic shaper solves my bandwith problem, I can enjoy smooth web browsing, every queue can get its fair share of bandwith, but latencies are too high for gaming when download queues are saturated

So experienced users can give me an advice, is it normal to have high latencies like mine, can it be solved?

Thank you in advance

Thanks, but I really need to limit at the interface level (Entire WAN)