Yes, however at the time my entire network had stopped working, prime time and all.  First and foremost that I needed to get the link back up.  I intend to revisit this again, I have another pfsense router coming in so I will be able to do some testing.  We are a software development company and Internet is important lol.  I am going to look at the blank value when I redo this.

I cleared out the state tables and rebooted, but I'm still limited to 20mb up and down.  This is the same as my original rule which I used for testing, but I deleted it and created a new rule for 46 mb up and down.  What else can I do to get the traffic shaper to use the new values? Thanks!

Seems to be (something like) working now … started with only configurating WAN interface (without LAN). Then a 2nd Interface ... bridged ... and then shaper wizard.

Hi Harvy66 thanks for the reply, yep they do unfortunately.  I think uploading is worst then torrenting lolz… especially when having 2mb upload and now these days there's so many sites to upload..like google drive,dropbox, mega, filepup ,etc :(

As far as I understand, traffic will bring some benefits only if you have already some contention. Shaping will then prioritize traffic as per your rules. I'm pretty sure you will get, assuming there no network contention, benefit from ads removal. Then debate is perhaps more to discuss about ads removal implementation  ;) Tweaking DNS is one option. Relying on features like Squid + Squidguqrd is another way, better from my standpoint. Do not expect throughput improvement when adding Squid in the middle. Benefit of cache is very little nowadays, especially if you perform tests with one single user, mainly because of the dynamic aspect of Web and the use of HTTPS almost everywhere. But I believe you will get more granularity and better (to me) control with Squidguard than DNS.

@KOM: How does the qACK and qACK/qGames differ? Does the qACK take priority? Does the qACK/qGames take more of a priority. TCP requires an ACK to initiate the sending of the next packet from the source.  You generally want to prioritize ACKs because that is what TCP uses to help it's flow rate calculations.  UDP does not use ACK since it's a connectionless protocol.  That's why you see TCP rules direct ACKs into qACK and UDP rules don't.  In most shaper configs I've seen, you want to put ACK and DNS in the top queue, VoIP is next, HTTP/S next and everything else last. I would like to know how assigning aliases helps this config. It makes the ruleset both easier to rad and maintain. Thanks!

If the modem literally hangs (like, requiring a power off/on), you'd better look for fixed firmware HW that's not broken

@stm110: Ok, there are some security traffic that really need to come through. So let´s narrow it down and focus on incoming traffic. Incoming from the WAN side?  You can't control that. You can only control what leaves the box. What arrives at the box is decided entirely be the sending side.  Furthermore, if what arrives at the box is congesting other traffic arriving at the box, it's just too bad, you can't control that. Exceptionally, under specific circumstances, there are techniques to limit the sending of TCP ACKs so that the sending side will quench their output, but this is pretty advanced stuff, and I'm not sure the traffic shaper can help with this. If you're dealing with UDP traffic, all bets are off. –A.

As you can see there: Target version changed from 2.2.3 to 2.3

I had the same issue this is how I solved it, I have 13down/2up i enabled the VOIP meaning that i cannot add more then the 30 percent from what I start. ex: you have 10down/1 up so you put 1000kbit x 30%= 300kbit upload but put 250kbit 10000kbit x 30%= 3000kbit download but put 2500kbit and I see the pics that you have some in kbit others in mbit, put everything in kbit and try it out also try with HFSC, and lastly you forgot to put your IP of your asterisk.  ;)

@lihuizhan: hello, i see a list of instant messengers to choose from in the Traffic Shaping setup wizard but Skype is not in the list… this needs to be added. Is there any work around in the mean time? Also, I'd like to see in the wizard a way to leverage DSCP values in the priority queues. Such as prioritize all packets with DSCP value EF, AF31, CS3. if there is also another way to do this without the wizard? id love to know. thank you guys... If you create a catchall rule (put above the default), you can scroll down to advanced settings and choose the DSCP tags to match traffic. Skype doesn't use DSCP or any TOS/ COS markings. You can however, use the integrated QoS policy in Windows to mark Skype traffic with DSCP tags. See the technet article on how to achieve this: https://technet.microsoft.com/en-us/library/dd759093.aspx

More Graphs [image: NexusLANPacketsOverall.JPG] [image: NexusLANPacketsOverall.JPG_thumb] [image: NexusStatesOverall.JPG] [image: NexusStatesOverall.JPG_thumb] [image: NexusLANOVerall.JPG] [image: NexusLANOVerall.JPG_thumb] [image: NexusWAN2QueuesOverall.JPG] [image: NexusWAN2QueuesOverall.JPG_thumb] [image: NexusWAN1QueuesOverall.JPG] [image: NexusWAN1QueuesOverall.JPG_thumb] [image: NexusWAN3QueuesOverall.JPG] [image: NexusWAN3QueuesOverall.JPG_thumb] [image: NexusLANQueueOverall.JPG] [image: NexusLANQueueOverall.JPG_thumb] [image: NexusLANOVerall.JPG] [image: NexusLANOVerall.JPG_thumb] [image: NexusWAN3Overall.JPG] [image: NexusWAN3Overall.JPG_thumb] [image: NexusWAN2Overall.JPG] [image: NexusWAN2Overall.JPG_thumb] [image: NexusWAN1Overall.JPG] [image: NexusWAN1Overall.JPG_thumb]

Thanks gents.

They seem to be some sliding window and approach the correct value, but they are not realtime

I installed a pfSense instance from scratch by installing it through CD.iso. (is is virtual and runs on a VMware ESXi, so this is hassle free) No configuration except the WAN/ LAN interfaces. Same! Download max 2Mb/s- nearly the same as the uplink! So I doubt it is a pfSense issue. Could confirm it is not by attaching a Win7 directly to the cable modem- speedtest showed same results. So definetly not a pfSense issue. Still on searching for the root cause together with the provider's support team. Anyways, thanks for the ideas! /KNEBB

There was some other traffic in qDNS for a bit that inflated that queue.  I will see about making a single post after this weekends lan party that we will be having and then just keep updating that thread.

It's an ALIX Board. Ah OK.  Nevermind, it's not your NIC, or at least not for that reason.

I have read the article pointed to by Nullity: http://www.linksysinfo.org/index.php?threads/qos-tutorial.68795/ according to the above link and what you guys are saying…, it all goes to controlling/shaping up the "upload" queue which will also directly influences the download stuff. I have researched a bit and the thing I see ATM is squid's "delay pools"..., but I will still have to try it out. anyone can point me on how to limit/shape all kinds of streaming (and download as 2nd)? as this is the only thing gives problems on games [when my poor 5mbps link is saturated]