@mamruoc:
First of all,
thank you for answering me.
Yes, I'm on pfSense 2.0
What you just told me is probably 100% correct and make sense for other people, but not for me.
I did not understand too much, nor have I found any good documentation, so I'm kinda lost… This way one of the reasons I went away from pfSense before, but now I really want to make it work.
Could you please be so kind to give me a bit more detailed explanation?
Thanks!
CBQ basically commits (guarantees) a certain bandwidth per queue and there is a priority setting. When 2 or more queues have exceeded the commited bandwidth, priority is used to determine how much of the remaining bandwidth is allocated (borrowed) to each queue.
I have no idea how you want to shape your traffic but the most basic is just bandwidth for both VLAN subnets as a whole.
Let's assume VLAN1 has subnet 10.0.1.0/24 and VLAN2 has subnet 10.0.2.0/24.
Also assume that you create 2 queues for your shaper -> qVLAN1 & qVlan2 (set this as default to keep the shaper happy).
Depending on your needs, set the commited bandwidth accordingly. You might want to set say 400Kbps and 100Kbps respectively. This leaves 4.5Mbps of bandwidth for borrowing.
Change the Priority of qVLAN1 to 4 and qVLAN2 to 1. This approximates a 4:1 borrow ratio if I recall correctly.
Note that this needs to be done for both upload and download queue sets.
Any traffic heading out to WAN for these 2 subnets will have to go through the allow any any rule you'd need by default.
Under firewall rules, look in VLAN1 tab and find that rule. Edit it and set it so that the traffic shaping queue is set to qVLAN1. Ignore the Ack queue for now since that is beyond the current scope and you can change the rules and edit the queues later when you get the gist of the shaper.
Go to VLAN2 tab and do the same except that you set it to qVLAN2 for the shaper.
This settles your outbound traffic.
Now go to Floating rules.
Make a new rule on quick match. Set the 'In' interface to WAN and any for protocol.
Set the Source to any and the destination to 10.0.1.0/24 subnet (VLAN1 subnet).
Set the queue to qVLAN1.
Repeat for VLAN2 by changing the destination subnet and queue respectively.
This settles the inbound traffic to each VLAN.