Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traffic shaper changes [90% completed, please send money to complete bounty]

    Scheduled Pinned Locked Moved Completed Bounties
    375 Posts 72 Posters 507.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eri--
      last edited by

      Maybe but as i thought of it a queue is always a child of its parent and the tree assumes that too!

      No?! (If no, then maybe i can make that change.)

      1 Reply Last reply Reply Quote 0
      • D
        djmizt
        last edited by

        Hi Ermal,

        I'm getting this error when I click on the wizard:

        Parse error: syntax error, unexpected T_STRING in /usr/local/www/firewall_shaper_wizards.php on line 61

        I had queueing enable prior to upgrading to this version but those are not showing now. Let me know. Thanks. The new interface looks very nice btw :)

        1 Reply Last reply Reply Quote 0
        • H
          heiko
          last edited by

          You can try an update or just remove the line 61 it is just the title in there which was wrong or copy it from.

          • traffic_shaper_wizards.php, then it works. First you should try a recent update from ermals link. If this isn´t working, you can delete the line 61 manually as a workaround.

          Greetings Heiko

          1 Reply Last reply Reply Quote 0
          • D
            djmizt
            last edited by

            ok i commented line 61 on that file and I can use the wizard now;

            I'm trying to do multiple wan/multiple LAN and everytime the wizard finishes I only have the shaper on the WAN interface  ..my other interfaces (opt1,2,3) do not have any queues in them!

            I tried manually adding queues on each interface and it's not doing it

            I tried cloning the queues from WAN and no luck there either

            Maybe I dont have the latest files?? Can Ermal pm me the lastest cvs file location again? Thanks.

            1 Reply Last reply Reply Quote 0
            • S
              SlickNetAaron
              last edited by

              Hi all,

              It looks like you guys have put some good time and effort into getting the traffic shaper what it needs to be.  Hopefully this bounty is of value to me and I can throw in $50-100 for it.

              It sounds like this is possible to do, but I just wanted to verify.

              I have 1 wan (probably 2 in the future) on pfSense. It's about a 12/2meg connection. 
              LAN has a local router and also 2 access points.  I would like to split/share the bandwidth amongst these 3 devices attached to the LAN.  The trick here is that I need to have more than 2 layers of queues

              
              wan > pf (10.0.0.1) > switch > AP1           > customer router1(10.5.x.1) (Linksys Tomato)
                                                                          > customer router 2(10.5.x.1)
              
                                                       > AP2          > customer router 3(10.6.x.1)
                                                                             > etc(10.6.x.1)
                                                       >local router  > Local PCs             
              
              

              Sorry that diagram isn't working well. Basically - the AP1, AP2 and local router are attached to pfSense by a switch.  Then customer routers are static routed networks off of pf.

              The caveat is that each AP is only capable of about 5-6mbps of total traffic.  I would like to  let customers share the full-speed of the bandwidth from the AP.  Also, there may be some customers that would get less than an even share (penalty box per customer?)

              At the same time, we obviously need to prioritize VoIP, http, DNS and set everything else to a lower priority.

              So, I believe what I need to do is:
              1. Ident traffic type (flags in new shaper?)
              2. Setup multiple queues within queues?
                  a. WAN queues > b. queues for the individual APs (1 for the 10.5.xxx network and 1 for 10.6.xxx network) >
                  c. within the queues for the individual APs: queues or rules for traffic types (http, dns, etc)?
                  d. a way to limit individual customers (ie 10.5.3.x network gets limited to 512k but the rest of 10.5.xxxx gets to share the full bandwidth of the AP)

              Does that make sense? Will the new shaper allow me to do this?  I think it's just multiple layers of queues?  I do have outbound traffic shaping on the customer routers so they can't saturate the AP.  Customer routers inbound shaping is limited to dropping packets -  I don't want to use that option on the customer routers.

              Thanks for your input.  I would love if I can throw in some cash to the pot and get access to the new shaper if it will work for me.

              Regards,
              Aaron

              1 Reply Last reply Reply Quote 0
              • E
                eri--
                last edited by

                Yeah it can do multiple level of queues and all of what you describe.

                1 Reply Last reply Reply Quote 0
                • S
                  SlickNetAaron
                  last edited by

                  Great! Thank you!  I just sent $75 to Chris.

                  @ermal:

                  Yeah it can do multiple level of queues and all of what you describe.

                  1 Reply Last reply Reply Quote 0
                  • S
                    SlickNetAaron
                    last edited by

                    So I guess I need to know how to access and install this.  I will get a PM?  This is an embedded install on ALIX.2C3

                    Regards,
                    Aaron

                    @SlickNetAaron:

                    Great! Thank you!  I just sent $75 to Chris.

                    1 Reply Last reply Reply Quote 0
                    • E
                      eri--
                      last edited by

                      @SlickNetAaron:

                      So I guess I need to know how to access and install this.  I will get a PM?  This is an embedded install on ALIX.2C3

                      Regards,
                      Aaron

                      @SlickNetAaron:

                      Great! Thank you!  I just sent $75 to Chris.

                      Yes, pretty soon.

                      1 Reply Last reply Reply Quote 0
                      • N
                        NateDavis
                        last edited by

                        If this is the place for tech support questions with the new shapper than great. Otherwise, please direct me where these should go.

                        I have been playing aorund with the new shapper and either I am really dense, and can't figure it out or I don't understand QoS Properly…  Who Knows...

                        Anyway, I am trying to prioritize VoIP traffic. This traffic runs over my OpenVPN connection setup in the pfSense. I am having a real problem getting the traffic to register in the voip queue (using the wizard and then modifying the floating tab in rules). Is there anything special I am suppoed to do? I thought about trying to prioritize the openvpn traffic, but couldn't get that to work either. Everything just goes to the default queue.

                        This is an Avaya ip office setup. I have traffic being tagged with difserv-  DSCP 46, DSCP Mask 63, and SIG DSCP as 0. I tried setting the diffserv in the floating rule to 46, but it still didn't put that traffic in the queue. Any help would be appreciated.

                        Thanks!
                        Nate

                        1 Reply Last reply Reply Quote 0
                        • H
                          hoba
                          last edited by

                          Shaping inside openvpn tunnels is not yet supported afaik, inside IPSEC should work though.

                          1 Reply Last reply Reply Quote 0
                          • E
                            eri--
                            last edited by

                            It is the default LAN rule that is botching it.
                            Just make it specific or create the rules for the in the LAN tab over the default one supplied by pfSense.
                            And please try disabling the antilockout rule.

                            With the new update things should be better(a matter of days since some issues have been fixed).

                            1 Reply Last reply Reply Quote 0
                            • S
                              SlickNetAaron
                              last edited by

                              Hi, I don't mean to be impatient.  Just wondering when I may get access to the new shaper.  I can wait for the new update if it is just a couple days.

                              Regards,
                              Aaron

                              @ermal:

                              With the new update things should be better(a matter of days since some issues have been fixed).

                              1 Reply Last reply Reply Quote 0
                              • S
                                sullrich
                                last edited by

                                Should be soon.

                                1 Reply Last reply Reply Quote 0
                                • E
                                  eri--
                                  last edited by

                                  For all the bounty contributors.
                                  In the same link as before will find the updated images with several problem fixed.

                                  1 Reply Last reply Reply Quote 0
                                  • E
                                    eri--
                                    last edited by

                                    Get the one with the highest date on it. as -20080324 ;)

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      songus
                                      last edited by

                                      Ill add 50 to the bounty, should i send them now? when will the image be available¿?

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        hoba
                                        last edited by

                                        @songus:

                                        Ill add 50 to the bounty, should i send them now? when will the image be available¿?

                                        All bountysupporters get exclusive access to the testingimages and are welcome to testdrive and report back. All others will have to wait for now until there are official builds including the changes. Feel free to send the money in right now.

                                        1 Reply Last reply Reply Quote 0
                                        • E
                                          eri--
                                          last edited by

                                          I explained it a page before:
                                          http://forum.pfsense.org/index.php/topic,2718.180.html

                                          the queue wizard is really a work in progress. the first part is difficult to understand and has text labels in code style. the second part, the one with traffic type prioritization, is an heritage of the old shaper wizard but has no reason to exist, 'cause is not applied anywhere and there's no interface to edit. It seems that now the assignment of traffic type to queues is done within each firewall rule.

                                          Well you do not need any interface to choose since it applies to all interfaces.
                                          Read my explanation of the Floating Tab.

                                          As for the names i will make them more friendly.

                                          BTW, since you are a user what part of the first part you didn't understand?

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            k3rmit
                                            last edited by

                                            sorry, i just found your 1st explanation, that's why i deleted my post…

                                            i'll try apply the rules as by your tutorial and in case get back to you with a good feedback.

                                            to answer your question, if for example i click on the "single wan multi lan" wizard, i'm asked for the number of connections: in my understanding this should be the LAN and the DMZ, but in the next step i have WAN and OPT1 (DMZ) grouped in the "setup connections speed" section, like if we were talking about two WANs, while the DMZ has to be considered like a LAN section.
                                            i'm puzzled here because given i'm configuring multiple lans, as by wizard name, i should be asked just for the wan bandwidth and then describing the lan part. this could be a limit of my understanding of the shaping mechanism within pf, but i have to admit that the wizard isn't a lot descriptive about what am i doing with the info i'm entering and the options i'm choosing.

                                            i just want to avoid traffic shaping between the LAN and DMZ and meanwhile shape all traffic from all interfaces to WAN: from your tutorial i understand that i just need to assign floating rules to queues. i have a solid heritage of rules assigned to each interface, so i think it will take time to make it work correctly. is there any monitoring/debugging application for pf out there?

                                            btw, thanks for the prompt answer.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.