Hi, I solved the problem by editing /etc/inc/interfaces.conf The default list of altq supported drivers seems outdated. Since the comment referse to FreeBSD 6.0 /* Per:          * http://www.freebsd.org/cgi/man.cgi?query=altq&manpath=FreeBSD+6.0-current&format=html          * Only the following drivers have ALTQ support          */ Also stge supports vlan so I add it to vlan supported devices list too. Hope this helps someone oytun

Newer snapshots has a version that is fixed.

@sullrich: What kind of NICS are you using.  This is starting to sound like a driver issue. I really think it is a driver problem. I got a new 10Mb/s cable connection at home moving up from 3Mb/s. I didn't have a problem before I upgraded but now my ping times are as high as 3000ms when my traffic rate hits around 4Mb/s. Browsing degrades to a crawl so obviously http was also affected when I'm using just little under half my assigned speed … and I do setup my queues to give http higher priority over all traffic. At first I though it was an ISP configuration problem, didn't want to blame my Pfsense box, so I called and reported the problem. They told me the obvious thing to do ...  "plug the Ethernet cable from the modem directly into the pc" .. Boom problem vanished even when the connection speed is near maxed, my pings times were constant and very good. Im running Pfsense on a PII 366Mhz with 380 Mb of memory.. even when near maxed at 9Mb/s the cpu is still 80% - 85% idle, so it wasn't a performance issue problem........... Well skipping out my long story of testing and probing I did eventually got rid of the problem when the traffic shaper was disabled. The problem returns if the statement altq on $wan for example ever showed up in the pf rules file. I'm using two nic that uses the dc driver but can't recall the manufacturer or brand at the moment. I have been reduced to using my old Linksys router for my network because the internet goes bad whenever the traffic goes to 4 megs. I want to try to get Intel nics to see if it would fix my problem but I can't get any to buy here locally. Oh well.

If your CPU is pegged under those circumstances, I don't think it's going to matter what CPU you use. It's likely a problem with some run away process that's going to use 100% of your CPU regardless of how fast it is.

Your calculations are right.  Do you have bandwidth dedicated in other locations as well?  I think this could be a cumulative number.  I bet your ack queue is fairly large as well.  I do know for a fact that if your queues with dedicated bandwidth add up to more than 100% (in your case the 368), that is trouble.  Hope that helps.

I fixed the problem by disabling the userland FTP-Proxy application on LAN interface.

But the problem I see is that (with uTorrent at least) the source port number it uses to outward connect just keeps incrementing.  See the notes I have written up here http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing#Supporting_bittorrents If you know a better way of doing this, I'm keen to hear it…  ;D

You can direct all of one type of traffic out one interface using firewall use.  You may also search policy based routing to find this.  Its included in the load balancing docs.  For the other, there is no official way to multi-wan traffic shape

Just a quick tip, if you say your Inernet connection size is 15 megs, then asssign 60 megs to a queue, it will die a horrible death.  The math has to add up in the shaper.  Hope that helps  ;D

I think we found the problem. P2P was the default queue and when the upload reached the upload limit it was some packet loss. Now we change the rules: OthersL the default queue and the last rule catch everything to the P2Pqueue. It seems working for a day. I used this type of Traffic Shaping that's why my system was working. We had the same problem on WRAP with 1.01, 1.2b1 and VMware with 1.01.

I think this problem occurs again on 1.2 beta1. ######################################################### Diagnostics: Filter Reload Status There were error(s) loading the rules: /tmp/qwanRoot.rules:11: syntax errorpfctl: Syntax error in config file: pf rules not loaded pfctl: load anchors - The line in question reads [11]: … ######################################################### /tmp/qwanRoot.rules ################################################### System Aliases loopback = "{ lo0 }" lan = "{ rl1  }" wan = "{ rl0  }" enc0 = "{ enc0 }" User Aliases pass in quick on $wan proto tcp from any to 192.168.10.180 port = 443 keep state  queue (qwanRoot, qwanacks) label "USER_RULE" pass in quick on $wan proto tcp from any to 192.168.10.180 port = 2223 keep state  queue (qwanRoot, qwanacks) label "USER_RULE" pass in quick on $wan proto udp from any to 192.168.10.180 port = 1194 keep state  queue (qwanRoot, qwanacks) label "USER_RULE" pass in quick on $wan inet proto icmp from any to 192.168.10.180 icmp-type echoreq keep state  queue (qwanRoot, qwanacks) label "USER_RULE" queue qwanRoot label "USER_RULE" pass in quick on $lan from 192.168.1.0/24 to any keep state  queue (qwanRoot, qlanacks) label "USER_RULE: Default LAN -> any" pass in quick on $enc0 from any to any keep state  queue qwanRoot label "USER_RULE" ########################################################################################## thanks,

@aphekz: hi is there any possibility to tagging by packet length in openbsd pf? for example dst port 80 packet length <80  tag www1 dst port 80 packet length >=80 tag www2 or maybe there is another way to put http request in one queue and http upload (ex. photos, files) to another queue? thanks squid can manage traffic per host or per extensions

It's a kernel ordering thing - PPTP happens before it hits the firewall portion that does the traffic shaping, so it's PPTP traffic already at that point.

Try your tests again with the traffic shaper enabled and visit status -> queues. Do you see drops on any of the queues besides the default queues?

3 stickies in subforum "Traffic Shaping" http://forum.pfsense.org/index.php/topic,2484.0.html http://forum.pfsense.org/index.php/topic,3050.0.html http://forum.pfsense.org/index.php/topic,1384.0.html

Search the forum for fair bandwidth. Short answer, it is not possible right now.

So basically what you are saying is that it does not like the names of the queues? Might have something to do with the queue name ending on a number.

I took a look at the Load Balancer tutorial. I think and according the scheme shown there I need to implement one more router in my network and finally (I hope so!) I will manage to get the desired results - will be able to redirect the traffic successfully. Thanks a lot! …and see you next time...  :)

"It is not ready.  Kernel patches are still being sorted out."