Traffic shaper changes [90% completed, please send money to complete bounty]

[eri--]

If you want to use it just for shaping and basic firewalling it should be safe to try.

Can you post your requirments so i can give you a suggestion on how-to?

[matremblay]

Like I said in my first post, it is a very simple network. I am not good with diagrams but I will try my best

Internet          –-> Fiber-to-Ethernet Box ----> pfsense server --------> multiple unmanaged 10/100 switches -----> 250 end users
Point-to-point            10mbit/10mbit                P4 computer                    some with gigabit uplinks                      wireless APs will most       
Fixed Ip                                                        eth0 wan                      most of the network is wired                    likely be added next
to Telco                                                        eth1 lan                          (80%) for 10mbit, rest is 5e                    summer

About the server:

Right now it is doing everything

DHCP, DNS, NAT, Firewall, Traffic Shaper
Should these functions be divided in two computers to have the stable release sharing the internet, and another one shaping the traffic so that there is added redundancy or it is sufficient?

Server is 10.0.10.1 subnet is 10.0.10.xxx to 10.0.11.254

Objective is to offer fast reliable service for basic internet features for students : web, mail, IM, games, web phones/cams. and restrict p2p and other traffic that is clogging the network to a crawl

Recently the wiring was redone, so each floor (1 to 5) has a feeder coming from the first switch to its switch room, then two additionnal switches are connected to each other per floor.

I'm trying to include as much information but I think thats pretty much it

On a side note, the last pfsense I installed was from the "live cd" release. I noticed the 2.0 snapshots only say "alpha alpha". Is the install procedure still similar? Just to know what to expect.

Thank you in advance. Again if this is successful I'd be more than willing to pay you for your trouble and research if you supply me with a "custom" build and some support for setting it up (which is pretty much what you are doing now)

Thank you so much for everything so far!! I feel, and hope this might be the solution of many of my troubles of the past few months

Marc

[matremblay]

Tomorrow morning I will go and install 2.0 over there

if you can post a few tips about the installation and configuration of the new features

i.e "limiter", and "http ack queue"

thanks ermal

[matremblay]

i installed 2.0 snapshot today, seems to be working well. However I would like help to configure the shaper and limiter for my needs if you dont mind

thanks in advance

[sporkme]

Howdy,

It's been some time since I've played with pfsense, but right now I've got a hard drive with the "click of death" so I have to reinstall.  For now, I'm trying 1.2.1-RC2, but since I'm now somewhere with a 30/5 and a 6.0/768 connection, I'd really like to try the new filter.  I have not received any updates from Ermal regarding new builds for quite some time.  Is there anything new forthcoming?  Would a basic config from 1.2.1-RC2 work with the older snapshot?

Thanks

[eri--]

@sporkme
it is coming as i always said after 1.2.1 is released.

@matermblay
Run a traffic shaper wizard with pfSense for your needs that will take care of the prioritizing of ACK and protocols.
You may look at the rules generated to see if it actually what you expected.
For the limiter you need to decide if you want to divide equally the traffic to each user or youwant to assign more weight to http traffic and than less weight to other traffic.
Give me more details about what policy you need and i will recommend what changes you need to do to filter rules generated by the wizard to integrate the limiter in there.

As i said per protocol shaping/filtering is coming real soon but you can start with this one.

[matremblay]

@ermal

thank you for your reply, I ran the shaping wizard but it stopped all traffic, then I saw another post that said it was looking at the "queue status" page that did this, so i will try running it again without looking at the queues monday, which wizard do you suggest i run based on my setup?

also in previous posts you told me i could increase http performance by making a http ack queue, could you teach me how please?

As for the limiter i tried setting the pipes but it did not do anything i must be doing it wrong. I would like to prioritize http but if it doesnt work i will split bandwidth to everyone equally.. something alongthe lines of 800kbitdownload/400kbit upload for all

thank you for your help

[eri--]

The ACK queue is created by the wizard and you can take a look at the rules generated the use that queue.
It will become clear when you see it configured.

For the limiter yes you created it but you have to apply it in the rules on the 'In/Out' section.
Depending on the needs.

[matremblay]

sorry i dont know if i am stupid or something but i really dont get the limiter. where is this in/out section?

I added the queues, checked the "enable" box, saved, and clicked apply settings
nothing, i can still download at 1000KB

[eri--]

In the rules! Firewall->Rules

[kapara]

@ermal

Never got the PM about the traffic shaper to try out.  ???

Thanks

[cmb]

This bounty is completed, for support, head to the 2.0 board.