Limit traffic out with limiter (2.0)

hawkin

Have 1 LAN and 2 WAN and have load balancing set up (works great)

The WAN links have slow up speeds, and with many users running p2p on LAN, the lines out gets congested.

I wanted to set up a simple limiter, limiting ie. 50kb/s per IP, and this should be quite easy to set up with limiter in 2.0.

Have a LAN (loadbalancing) rule:
Source: LAN net Gateway: Wan1BalanceWan2

where I try to put in the limit under In (not out), and have a limit made with:
50kb/s and mask with source addresses.

But I have problem of getting it to work. Clients are still able to output more than 50kb/s after this is set up.
Is there something I am doing wong?

jimp

When trying to combine limiters with load balancing, it probably won't do what you expect if you put the rules like that.

Make floating rules for each wan in the 'out' direction that specify the limiter.

hawkin

First: Thanks for the reply.

I have tried the suggestions you wrote, but I still se no change of the bandwidth usage out (it still maxes out around 2Mb/s the ADSL line has of max output)

I have attached some screenshots of how I have set it up (5kb/s out is harsh, but it should give a big change in bandwidth ususage, we have around 40 clients behind pfsense, so it should be max of 200kb/s in theory)

PS: I did only this setup on one of the WAN lines just to see if it worked. I assume it does not require both WAN lines to have limits to limit bandwidth on just one of them?

![limiter setup.png](/public/imported_attachments/1/limiter setup.png)
![limiter setup.png_thumb](/public/imported_attachments/1/limiter setup.png_thumb)
![floating tab.png](/public/imported_attachments/1/floating tab.png)
![floating tab.png_thumb](/public/imported_attachments/1/floating tab.png_thumb)
![rule part 1.png](/public/imported_attachments/1/rule part 1.png)
![rule part 1.png_thumb](/public/imported_attachments/1/rule part 1.png_thumb)
![rule part 2.png](/public/imported_attachments/1/rule part 2.png)
![rule part 2.png_thumb](/public/imported_attachments/1/rule part 2.png_thumb)

jimp

On that rule, check 'quick' and make the direction 'out' and then put the limiter in the 'out' direction, not 'in'.

hawkin

Thanks, I tried the suggestion (set to quick and direction out in the rule on floating) but I get this when setting the limiter only to out:

The following input errors were detected:
You must select a queue for the In direction before selecting one for Out too.

Should I just make a inlimit as well, and just set that high enough that it will never be reached?
I did try this (inlimit to 100Mb/s), but with no much success either.

jimp

Yeah, it probably does need a limiter in either direction.

eri--

Why not do this on the LAN side(LAN load balancing rules)?!

jimp

ermal,

When we discussed this the other day, you said with multi-wan it was better to put the limiters on floating rules (unless I misunderstood something, which when it comes to shaping is quite possible).

Or perhaps that was specific to what the other person was trying to do.