Traffic shaping in Pfsense 1.2 is based on IPs and ports, so indeed as you say it is quite useless to classify and shape torrent traffic. In 2.0 there will be "L7 filters", which work by packet inspection. Squid in transparent mode will send everything to qlandef, see http://forum.pfsense.org/index.php/topic,14436.0.html

ok so i changed my max speed from 800kbps to 800mbps. it made a dfference however one last problem exists. the traffic shaper chokes youtube. when its off youtube can stream not so fast but ok .. with it on i get pauses…

Well if it's there, it's meant to work.. and if it's not, it's either a bug or I'm doing something wrong… I hope there are others who can test/confirm this. Update: OK, did a fresh clean install.. what I had said earlier may have been inaccurate, i think there needs to be a rule for each queue else something goes frenzy.. I removed all the queues to start have my own rules, doing further testing now to confirm. Update 2: Further confirmations required, as it is right now, every queue must have at least a pair of properly (confirm again please) written rules. To test, I deleted all rules, got the errors. I added manually following the same format. The errors disappeared. Note to developers: The Apply Changes + Save can be a little misleading. Some sections after making changes you get the Apply changes box. (example, adding a queue). In many sections, we get this, so I have grown accustomed to pressing apply changes once I'm satisfied with them. However, when deleting rules, I don't get this "Apply changes" button, and since I'm already accustomed to it, I sometimes completely forget the need to press "save". Well, rather trivial, but i thought worth noting.

One problem with using bursting to "prioritize" web browsing over http downloads is that you need to set a hard upper limit as m2, meaning that even if there is only 1 client online, he can only use that limited bandwidth to download, which is a bit of a waste IMO. It would be nice if there was some way to give a higher priority to bursts without having to specify a hard limit, so that the full bandwidth could be used at all times…

50 views and  no reply :(

what i am trying to say is that kb is the current choice.  i am betting that if you pick 'kilobits', and the look again, it will still say kb.  for an experiment: change it to 2 megabits, and then when you look, i'm guessing it will say 'mb'.  obviously you don't want to leave it that way, just to prove/disprove the theory for your peace of mind.

I tried, but gave up on Squid as I couldn't get it to work reliably with large downloads. See http://forum.pfsense.org/index.php/topic,21458.0.html Here's a (quick & dirty) list of Rapidshare networks: http://www.uebi.net/howtos/rapidshare-networks/rs-networks-20090908.txt I now set up an alias based on this list, and route Rapidshare traffic to qOthersDownL with the built in Pfsense traffic shaper.

I would say you are good to go then :)

i don't actually remember if it was solved - it might be.  i didn't really go back after it, since it seemed not a big deal.

Some clues? How to accomplish this? I've been thinking about writting a curl php script which login to the Web interface and toggle the checkbox to disable/enable shapper. However, I suppose there must be an easier way. Please pfsense gurus, help.

It turns out my audio quality problems might not be traffic shaper related at all.  Not sure, but found bad checksums using a packet capture today. Here is my new post regarding the new find:  http://forum.pfsense.org/index.php/topic,21380.0.html

@ermal: Actually on 1.2.3 you can shape inside the tunnel but i am not sure if the rules allow this to be setuped. On 2.0 it is surely possible. In 1.2.3 how do you shape inside the tunnel?  Would it be with firewall rules?  Or a traffic shaper rule? I'm curious because we have remote SIP extensions I would LOVE to run over our IPSEC instead of the internet.  But they also run a lot of SMB traffic over IPSEC, so I absolutely HAVE to shape the data within the tunnel for it to sound good.  Thanks.

is traffic shaping on wireless to lan bridged interfacing working with any1 coz i just dont see the wireless traffic falling into any configured queue other than the default queue.

pfSense is not based linux. It's based on FreeBSD. No you cannot shape directly based on MACs. However what you can do: create static IP <–> MAC pairings. Like this you can make sure that a MAC always has the same IP.

Let us know.  If it is an outbound BW shaping issue, there are posts here that address this.

@danswartz: The default location for these is in sip_general_additional.conf, but you tweak them in sip_general_custom.conf.  Like this: tos_sip=0 tos_audio=0 NB: this is for a freepbx-based system.  If yours is not, you need to figure out where to set these for your setup. Been looking for this solution for a long time. Thanks. Im on the PBXInAFlash asterisk flavor….