Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to limit specific IP's bandwidth with shaper

    Traffic Shaping
    8
    24
    24.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      Awesome.

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • R
        rt_rex
        last edited by

        Just a hint .
        If you creat an alias and add all your limited host there is no need to creat all these rules you create it once.
        I have not tested but it should work.

        Don´t Try this @home go outside!
        WIFI Link @ 76 km
        Pfsense with 3G USB

        1 Reply Last reply Reply Quote 0
        • P
          plazasigua
          last edited by

          the problem with using alias, is that you are going to use a same penalty queue for several ip´s, sharing the bandwidth asigned for that penalty queue between all of them.
          i tried that, and if i have 6mb total, and create a 1mb penalty queue, all the ips asigned to that queue share only 1mb between them, but i want 1 mb cap for each, therefore i need to do it the hard way, one penalty for each ip…

          1 Reply Last reply Reply Quote 0
          • A
            Alan87i
            last edited by

            So Can  I make multiple queues  All the same just give each one a different name ?
            IE 5Mb for 2 minutes and 1Mb after for down  /name ip1down
            and 400Kb for 2 minutes and 100 Kb after  for Up  /name ip1up

            same as above name ip2down – ip2up

            1 Reply Last reply Reply Quote 0
            • P
              plazasigua
              last edited by

              here the examples

              Optimized-QUEUES.jpg
              Optimized-QUEUES.jpg_thumb
              Optimized-QUEUES_2.jpg
              Optimized-QUEUES_2.jpg_thumb

              1 Reply Last reply Reply Quote 0
              • P
                plazasigua
                last edited by

                yes, you only need to make sure and use each queue for a single IP/rule, single host or alias, and select the correct penalty queue,
                the images are from one of my working boxes..

                Optimized-QUEUES_3.jpg
                Optimized-QUEUES_3.jpg_thumb

                1 Reply Last reply Reply Quote 0
                • A
                  Alan87i
                  last edited by

                  One question .
                  On the second Image from your last post is that A Down rule/ Queue ?
                  I see you have the IP as the source! and the IN Interface is LAN out is WAN.

                  After Pondering this till my nose bled I figured for Inbound , In interface is set to WAN Out is set to LAN , Protocol (any) The Source is left blank ,, Destination is set IP address .

                  I'm setting for up loads as well and my outbound page looks like your second image.

                  The way I have set it up works for downloads on my laptop , Haven't tested Uploads yet.

                  What I really want to know is Can I use the same down queue and UP queue for more than 1 IP address/ user?
                  For kicks I set a second user up on the same Queue's as my laptop , didn't get and filter errors on the reload. I'll wait and see if the phone starts ringing.

                  1 Reply Last reply Reply Quote 0
                  • A
                    Alan87i
                    last edited by

                    1 rule I made seems to work

                    queuerule.JPG
                    queuerule.JPG_thumb

                    1 Reply Last reply Reply Quote 0
                    • J
                      jhabers
                      last edited by

                      I just tried to set this up and it doesnt seem to be working. I have an alix board with wan, lan and opt1. I have set the opt1 interface to be the penaly box. Is this possible with 1.2.3?

                      1 Reply Last reply Reply Quote 0
                      • A
                        Alan87i
                        last edited by

                        No idea I would use a lan IP
                        I also figured out that this don't work at all if you have squid running and proxy set on the browser. Too bad

                        1 Reply Last reply Reply Quote 0
                        • E
                          eri--
                          last edited by

                          Go to 2.0?!

                          1 Reply Last reply Reply Quote 0
                          • J
                            jhabers
                            last edited by

                            @ermal:

                            Go to 2.0?!

                            thanks, so is it a fact that 1.2.3 cant shape both lan and opt at the same time?

                            1 Reply Last reply Reply Quote 0
                            • P
                              plazasigua
                              last edited by

                              Because the importance to limit downloads in my network is priority, i dont use upload limits, but i tested both ways several months ago and it worked really fine, and is so simple like the swap of the source and destination in the individual queue, to create  an upload queue ,and in the rules CHANGE THE TARGET from WANDEF (the default for upload) to your particular created queue, this way both queues work simultaneously for one IP, so you have upload and download limited to a single user.

                              I´ll post images from a rule with upload and download limits for one ip.

                              greeting from Honduras

                              1 Reply Last reply Reply Quote 0
                              • J
                                jhabers
                                last edited by

                                @plazasigua:

                                Because the importance to limit downloads in my network is priority, i dont use upload limits, but i tested both ways several months ago and it worked really fine, and is so simple like the swap of the source and destination in the individual queue, to create  an upload queue ,and in the rules CHANGE THE TARGET from WANDEF (the default for upload) to your particular created queue, this way both queues work simultaneously for one IP, so you have upload and download limited to a single user.

                                I´ll post images from a rule with upload and download limits for one ip.

                                greeting from Honduras

                                yes please do, would like to see screenshots

                                1 Reply Last reply Reply Quote 0
                                • A
                                  Alan87i
                                  last edited by

                                  @plazasigua:

                                  Because the importance to limit downloads in my network is priority, i dont use upload limits, but i tested both ways several months ago and it worked really fine, and is so simple like the swap of the source and destination in the individual queue, to create  an upload queue ,and in the rules CHANGE THE TARGET from WANDEF (the default for upload) to your particular created queue, this way both queues work simultaneously for one IP, so you have upload and download limited to a single user.

                                  I´ll post images from a rule with upload and download limits for one ip.

                                  greeting from Honduras

                                  I have messed with this for hours.
                                  I made a down queue and an UP load queue.
                                  The download queue Rule is attached . And works fine. And I also have Lusca cache running with Firefox set to AUTO detect and a video from live leak seemed to cache and played from the cache on my test machine I watched the queues page at the same time and saw the bar and Mb count rise for my test queue to 3.5 Mb down. While the traffic graph showed 0 to 3 Kb . Oh and the video loaded in 10 seconds on the Test machine and took  4 minutes on my desktop the first time. And it loaded from the cache at the speed set by the queue for download.  I have tried this test several times , I first watch /load a video on my desktop , Graph shows 1.x too 2.x Mb Inbound . Send the link Now to 2 other machines on the lan with a DL queue and a dl rule set to 5 Mb for 1 minute . When either test machine clicks the link traffic stays at next to 0 as normal , So it reads it from the cache , The queues page shows the queue speed tapping out at 5 mb then stops because the video loaded in under 1 minute.

                                  But I cannot make an UP load queue that the filter doesn't have a fit over or works if the filter reloads fine.

                                  Looking for any help at all . Thanks

                                  pftsruledown.JPG
                                  pftsruledown.JPG_thumb

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    jhabers
                                    last edited by

                                    Ahhh, I think i figured out my problem, the traffic I was trying to shape was on the OPT1 interface, I forgot to change it to OPT1>WAN, WAN>OPT1 instead of the default LAN>WAN, WAN>LAN in the traffic shaping rules

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      Alan87i
                                      last edited by

                                      I followed this guideline and made 7 queues and 7 rules 1 for each. I can sit at the PC for the last rule I made and hog the net all I want while watching the queues page I see no traffic being passed. This system doesn't have squid running.
                                      While the first few queues are working and dropping the speed to the set Kbps after the set time limit.
                                      Any Ideas ?

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tojaktoty
                                        last edited by

                                        Thanks for the info. Please keep us updated.

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.