… may be someone knows a solution or a similar open source product, which can do that (shaping Traffic going through with no need of filtering the traffic)? But please no pure *nix/*bsd solutions as this is too complicated for me ,)
I was under the impression that with RED, the more bandwidth a person is using, the more likely he will be dropped.
http://www.openbsd.org/faq/pf/queueing.html#red
"Random Early Detection….When dropping packets, RED randomly chooses which connections to drop packets from. Connections using larger amounts of bandwidth have a higher probability of having their packets dropped. "
OK, That thread looked to me to be the correct. Thirty lashes for the noob…. got there via google, didn't realize it was bounty territory!
I have installed 1.2 and setup the traffic shaper. This is nicely leveling the playing field for the users at 300kbs. The penalty box will be great for really putting the screws to someone if needed!
What I am really looking for is a way to let certain IPs bypass the TS ( like the apt mgr) and get full speed. I would like to use firewall rules generated by scripts in the login portal. I had figured this out with monowall and dummynet pipes a few years ago. Not sure how this would work in the pfsense world. I have seen things in the posts here that are close, but addressing different issues. I just need a push in the right direction.....or told it is not possible.
Thanks.
It's quite simple..
Make sure you set your upstream and downstream bandwidth correctly… otherwise your shaping won't work properly.
In your shaper rules, set all source and destinations as a wildcard ( * ).
Next, edit your qwandef and qlandef queue.
Check the box that says "Random Early Detection".
Give it a test... Let me know how you make out.
/asl
Sorry, there's actually a bit more work you need to do.
Once you set your rule's source and dest as *, you need to modify the qwandef and qlandef queue.
Edit them and check "Random Early Detection"
Save, apply, done!
Did you read in the forum at all before posting this question?
http://forum.pfsense.org/index.php?action=search
->http://forum.pfsense.org/index.php?action=search2
–>http://forum.pfsense.org/index.php/topic,2718.0.html