Sure, there's several ways to make it work. You could also just use the standard: UDP * * 5060 UDP * * 10000-20000 In fact after running the shaper wizard, check queue status while making a call and it should already work pretty well for you. I would tweak queue bandwidth and and RED to the VoIP queues but that's about it.

with QoS you will ALWAYS need to drop your overall bandwidth to 20 % less than the actual WAN connection up/down speeds from your ISP. Otherwise the ACK packets on your upload get jammed in a queue at the ISP equipment killing your attempts to do QoS. Yes it sounds like a waste of bandwidth but its a small price to pay for better traffic management.

You have to use upperlimit parameter to setup the hard upperlimit as you are requesting. Search the forum for explanations of how HFSC works.

I have had success with this by creating an IP group with my subnet.  Then I got in and out traffic.

besides the security aspect ..you can also improve your VoIP by using traffic shaping i.e. prioritizing VoIP packets and/or making sure it always have available bandwidth if you do decide to place your VoIP device (ATA, etc.) behind the pfsense router, make sure you search and read the forum/wiki about NATing and random ports - you'll need to disable this feature or you will get one-way audio issues

Great thats what i thought too. i am not lookin to do a "in tunnel" shape, just the overall tunnel to get a throttle on how much of the pipe it can use. right now it is hogging all of my upload. it is cool to see but a real pain in the rear.  Thanks Guys!

Hey guys, how are you?? I need to make a little upgrade in this configuration (pfsense node) and want your opinion: I need to add a 3rd network card and create a static route to a new network, that is in another internet link I have purchased, and I think it should be done on NAT pfsense; so I would add a 3rd NIC on my NAT pfsense and configure a static route (200.123.x.x go to 3rd NIC) and my question is that, as this config is not being done on my shaper pfsense (this is another box running only shaper), so I think I would not have problems with traffic shaper; is it right?? thanks a lot srs

After long time I decided to test Pfsense some more. It seems that all the traffic from LAN -> Pfsense box go automaticly to the Default queue. This includes Shell and Webgui traffic. Why my webgui has been slowing down is that I had put the Default queue rule on a low priority queue. Have not managed to find out any way to shape this traffic and apparently it is not even possible.

pfSense != m0n0 but you have Limiter in 1.3 which is the pipe of m0n0.

@dvserg: Shaping bridge have some features. You must create rules from-connection_nitiator-to-target and will shape only Incoming traffic(for shape outgoing i modify pfsense 'inc' file). –- After my (INC) modifications this rules also shape outgouing traffic (ONE rule for both traffic directions). Hi, could you give me a basic run down of how to modify the INC file to shape outgoing (as in outgoing on the WAN interface) traffic in transparent bridging mode please. Thanks

I didn't get any answer for my question  so I will use RELEASE_6_2-p12 and: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/builder_scripts/conf/make.conf.6 http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/builder_scripts/conf/pfSense.6 http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/builder_scripts/patches.RELENG_6_2?rev=1.109;content-type=text%2Fplain For patches there are 2 versions http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/patches/RELENG_6_2/ http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/patches/RELENG_6_2_SHAPER/ Which one I should use? Regards, Hans

Yes, as far as I know their is no way to do this without traffic shaping.

Or, if you require authorization, you can do this with any RADIUS server supporting sending bandwidth parameters in RADIUS attributes (e.g., UTM5 RADIUS, freeRADIUS, etc.). @Sh4: I am pretty sure you can do this with Squid if we are talking about http traffic.

Update… While searching through the forums, I came accross this: http://forum.pfsense.org/index.php/topic,9782.0.html I enabled the shaping rules, rebooted the box, and, SHAZAM!, UDP 4569 traffic is now redirected to the proper queues... Don't know if this is a BUG or a Feature, but at least I can prioritize my VoIP traffic.. Thanks L2

@kingjos: Also, is there any development in the 1.3 traffic shaper regarding layer 7 filtering? Want to sponsor it?!

pf + ALTQ + borrow ?

Quality of the modem/router indeed affect latency, thats one of the reasons we don't use a soho linksys router in a datacenter, a well configured pfsense gateway should provide the lan users a better connection quality than some soho stuff. But once you fixed the hardware bottleneck theres nothing you can do.