Limiters

Cino

search the forum, its been answered before. But if i remember, its nothing to worry about.

demian

thanks I already found the answer..
Now Im monitoring my limiters, with limitersInfo, but I dont know if it is working well or not.. Can anyone help me with the limiters info, please?
thanks!!
Limiters:
1- 100 Kb:download
2. 64 kb: upload

this is the print-out of my Limiter Info:

00003: 100.000 Kbit/s 0 ms burst 0
q131075 50 sl. 0 flows (1 buckets) sched 65539 weight 0 lmax 0 pri 0 droptail
sched 65539 type FIFO flags 0x1 64 buckets 1 active
mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000
BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
32 ip 0.0.0.0/0 192.168.1.112/0 2141 3083242 14 21000 13

00004: 64.000 Kbit/s 0 ms burst 0
q131076 50 sl. 0 flows (1 buckets) sched 65540 weight 0 lmax 0 pri 0 droptail
sched 65540 type FIFO flags 0x1 64 buckets 1 active
mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000
BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
72 ip 192.168.1.112/0 0.0.0.0/0 11 660 0 0 0

Cino

Never really looked at the limiter info status page. I ran some speed test to verify that it was working correctly for me. like http://www.speedtest.net. You could use a mini version of their software and run it locally, http://speedtest.net/mini.php

demian

thanks Ill try that.
Now I have some doubts.. If I limit a host on my LAN, I need to consider the bandwidth of my WAN? or which bandwidth?
This could be the scenario:
I have 3 MB bandwidth in my WAN connection, and I want to limit a host to use only 100k of that 3Mb, for upload and download.
Should I limit on the WAN interface or LAN interface?

thanks for your help!!

Metu69salemi

I would limit lan, if you have no bridged interfaces

Tomax

I haven't fully tested pfSense 2.0, but in my knowledge, by limiting LAN you are controlling the data flux the user from LAN do to WAN since the connections between LAN users are made by the switch it self. At my place i have applied the limiters to LAN and it's working fine to limit the internet access to the WAN by LAN users.

demian

thanks..
But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
That might work better?

"You can make a WAN rule with a destination of the LAN IP involved (NAT happens before the rules are processed) or you could put a rule on the floating tab, on lan, in the 'out' direction."
http://forum.pfsense.org/index.php?topic=34311.0

Metu69salemi

@demian:

But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
That might work better?

How many clients you want to limit? only one or all of 'em?

demian

some of them.. between 5 and 10 hosts..
I think if it works fine with 1 host it`d work with "N" hosts?

thanks for your help again!

Metu69salemi

You can create alias, fill that with limitable ip's and put that alias in your limiter rules

demian

yes I know that, but my "main" doubt is in which interface do I have to put my rules…upload on LAN and Download on WAN? or both in LAN?

thanks!

Metu69salemi

rules work always on ingress.

upload -> lan
download -> wan

You can also test how those work, if you put both rules on lan and none to wan

demian

ok
I will test both on LAN, many forum users says that this works, but I still believe that it'd be better: upload on LAN and Download on WAN..

thanks

after my test I will post again the results I get