Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [TIP] Traffic Shaping 2.0.1

    Indonesian
    8
    63
    32.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfz
      last edited by

      @extreemblank:

      coba di tes buka web http://onlineddos.blogspot.com/

      kemudian di klik ok pada message windownya…, web tsb memaksa banyak outgoing connection. coba perhatikan ping naik turun apa gak ?, atau coba bermain game apa ada pengaruhnya ?

      trims

      And than

      @extreemblank:

      oya itu sebelumnya sudah saya oprek sana sini, baru bisa berhasil limiter apply 1/2 s.d 1 detik, sebelumnya di thread yg lain pernah saya post shaper dan limiter telat kira2 6 s.d 10 detik an…

      di lan party jadinya menganggu sekali, kan setiap saat bisa saja ada user yang mulai / baru open connection / download.. atau idmnya di klak klik start resume, start resume berulang2.

      1 Reply Last reply Reply Quote 0
      • E
        extreemblank
        last edited by

        web di atas sudah di atasi dengan snort pakde. mantap…

        tapi saya masih belum berhasil mempercepat shapingnya, supaya ping gak naik walau lagi IDM. meskipun cuma 1 detik.
        btw... set priority di quee gak jalan ya?

        saya cek di /tmp/rules.debug gak dibikinin tuh Priority sama padahal sudah di set, ngebug atau gimana tuh pak?

        abc.JPG
        abc.JPG_thumb

        1 Reply Last reply Reply Quote 0
        • P
          pfz
          last edited by

          command : pfctl -sr
                            Pfctl -sn

          Seperti apa copy sini.

          1 Reply Last reply Reply Quote 0
          • E
            extreemblank
            last edited by 

            
[2.0.2-RELEASE][admin@pxzens.localdomain]/root(10): pfctl -sr
scrub on em0 all fragment reassemble
scrub on em1 all fragment reassemble
anchor "relayd/*" all
block drop in log all label "Default deny rule"
block drop out log all label "Default deny rule"
block drop in quick inet6 all
block drop out quick inet6 all
block drop quick proto tcp from any port = 0 to any
block drop quick proto tcp from any to any port = 0
block drop quick proto udp from any port = 0 to any
block drop quick proto udp from any to any port = 0
block drop quick from <snort2c>to any label "Block snort2c hosts"
block drop quick from any to <snort2c>label "Block snort2c hosts"
block drop in log quick proto tcp from <sshlockout>to any port = ssh label "sshlockout"
block drop in log quick proto tcp from <webconfiguratorlockout>to any port = http label "webConfiguratorlockout"
block drop in quick from <virusprot>to any label "virusprot overload table"
block drop in log quick on em0 from <bogons>to any label "block bogon networks from WAN"
block drop in on ! em0 inet from 192.168.0.0/24 to any
block drop in inet from 192.168.0.3 to any
block drop in on em0 inet6 from fe80::22cf:30ff:fe7c:97f1 to any
block drop in log quick on em0 inet from 10.0.0.0/8 to any label "block private networks from wan block 10/8"
block drop in log quick on em0 inet from 127.0.0.0/8 to any label "block private networks from wan block 127/8"
block drop in log quick on em0 inet from 172.16.0.0/12 to any label "block private networks from wan block 172.16/12"
block drop in log quick on em0 inet from 192.168.0.0/16 to any label "block private networks from wan block 192.168/16"
pass in on em0 proto udp from any port = bootps to any port = bootpc keep state label "allow dhcp client out WAN"
pass out on em0 proto udp from any port = bootpc to any port = bootps keep state label "allow dhcp client out WAN"
block drop in on ! em1 inet from 192.168.1.0/24 to any
block drop in inet from 192.168.1.1 to any
block drop in on em1 inet6 from fe80::22cf:30ff:fe7c:d3d3 to any
pass in on lo0 all flags S/SA keep state label "pass loopback"
pass out on lo0 all flags S/SA keep state label "pass loopback"
pass out all flags S/SA keep state allow-opts label "let out anything from firewall host itself"
pass out route-to (em0 192.168.0.1) inet from 192.168.0.3 to ! 192.168.0.0/24 flags S/SA keep state allow-opts label "let out anything from firewall host itself"
pass in quick on em1 proto tcp from any to (em1) port = http flags S/SA keep state label "anti-lockout rule"
pass in quick on em1 proto tcp from any to (em1) port = ssh flags S/SA keep state label "anti-lockout rule"
anchor "userrules/*" all
match quick on em0 inet proto icmp all label "USER_RULE: ICMP" queue qPing
match quick on em1 inet proto icmp all label "USER_RULE: ICMP" queue qPing
match quick on em0 proto tcp from any to any port = domain label "USER_RULE: DNS" queue qSmallFast
match quick on em0 proto udp from any to any port = domain label "USER_RULE: DNS" queue qSmallFast
match quick on em1 proto tcp from any to any port = domain label "USER_RULE: DNS" queue qSmallFast
match quick on em1 proto udp from any to any port = domain label "USER_RULE: DNS" queue qSmallFast
match on em0 proto udp from any to any port 1499 >< 5000 label "USER_RULE: m_Game BF2-1500-4999 outbound" queue qGames
match on em0 proto tcp from any to any port = 4711 label "USER_RULE: m_Game BF2-4711 outbound" queue(qGames, qACK)
match on em0 proto udp from any to any port = 16567 label "USER_RULE: m_Game BF2-16567 outbound" queue qGames
match on em0 proto udp from any to any port = 27900 label "USER_RULE: m_Game BF2-27900 outbound" queue qGames
match on em0 proto tcp from any to any port = 28910 label "USER_RULE: m_Game BF2-28910 outbound" queue(qGames, qACK)
match on em0 proto udp from any to any port 29899 >< 29902 label "USER_RULE: m_Game BF2-29900-29901-UDP outbound" queue qGames
match on em0 proto tcp from any to any port 29899 >< 29902 label "USER_RULE: m_Game BF2-29900-29901-TCP outbound" queue(qGames, qACK)
match on em0 proto tcp from any to any port 18900:18910 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 1818 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 39100:39220 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 49100 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 40000:40010 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 7777 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 19101 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 27780 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 29000 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 22100 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 5121 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 6000:6152 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = dc label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 9601:9602 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 8085 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 11011:11041 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 13413 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 19000 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 5105 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 10009 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 5340:5352 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 6000:6001 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 29200 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 10402 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 9600 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 15000:15002 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 16402:16502 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 3010 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 11031 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 4300 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 11005 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 6900 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 6112 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 14800 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 23800 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 13008:13009 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 16666 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 28012 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 5126 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 15001:15002 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 12011 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 12110 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 1202 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 7341:7350 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 7451 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 8421 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 6215:6217 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 12009 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 14004 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 23000 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 28000 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 5400 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 9376:9377 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port 10001:10011 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 40000 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 9300 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 9400 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 9700 label "USER_RULE: TCP Gaming dari forum, perlu dicek lagi" queue(qGames, qACK)
match on em0 proto tcp from any to any port = 2099 label "USER_RULE: TCP Game Launcher / Patcher" queue(qPatch-launcher, qACK)
match on em0 proto tcp from any to any port 5222:5223 label "USER_RULE: TCP Game Launcher / Patcher" queue(qPatch-launcher, qACK)
match on em0 proto tcp from any to any port 8393:8400 label "USER_RULE: TCP Game Launcher / Patcher" queue(qPatch-launcher, qACK)
match on em0 proto udp from any to any port = 27900 label "USER_RULE: game pb, mungkin, nanti di cek lagi" queue qGames
match on em0 proto udp from any to any port 55122 >< 55126 label "USER_RULE: m_Game BF2-55123-55125 outbound" queue qGames
match on em0 proto udp from any to any port 4999 >< 5501 label "USER_RULE: LOL.UDP, game ky dota" queue qGames
match on em0 proto tcp from any to any port = http label "USER_RULE: Browsing,download,youtube dll HTTP 80" queue(qWeb, qACK)
match on em0 proto tcp from any to any port = https label "USER_RULE: HTTPS" queue(qWeb, qACK)
pass in quick on em1 inet from 192.168.1.0/24 to any flags S/SA keep state label "USER_RULE: Default allow LAN to any rule"
anchor "tftp-proxy/*" all</bogons></virusprot></webconfiguratorlockout></sshlockout></snort2c></snort2c>

            ini pakde, trims sudah banyak membantu…  :D

            1 Reply Last reply Reply Quote 0
            • E
              extreemblank
              last edited by

              btw auto config yg dibuat pfsense di lan

                  • LAN Address 80
                    22 * * Anti-Lockout Rule

              qos defaultnya sy kasih kecil,supaya traffict yg gak penting / yg belum ane config dapat jatah kecil. malah akses web gui sama putty jadi ilut lelet, kalo saya disable aja gimana pakde ,diganti gitu, aman gak ya kira2?, takutnya nanti kekunci and belum ada persiapan cara2 buka kuncinya.

              1 Reply Last reply Reply Quote 0
              • E
                extreemblank
                last edited by

                saya mencoba di 2.0x ada beberapa masalah di Traffict shapernya.

                1. hasil wizardnya ikut melimit bandwidth ke web gui dan ssh port 22, defaultnya terlampau kecil untuk akses web gui dan ssh tapi teramat besar untuk traffict jelek yang akan lewat di quee default ini.

                2. selain itu parameter priority sepertinya di ignore, meskipun diisi tetap aja kosong di file confignya, spt yg sudah sy sampaikan sebelumnya.

                3. Terus bagaimana menuliskan rule sebelum user rule, karena saya coba di floating rules selalu larinya ke user rules, atau bisa gak kita edit aja langsung /tmp/rules.debug ini?, gimana caranya ?

                gambar quee ane, spertinya sudah berjalan, rule masuk ke queue yang diinginkan ?.., di pftop jelas terlihat sekali tidak adanya Prio yg sudah di set sebelumnya..

                di sini mungkin masalahnya shg priority tidak berjalan, ping dan game selalu lag 1 detik sebelum kemudian lancar lagi, dimana mereka hanya mengandalkan setingan yg dari  Realtime  curve's m1, d, m2 alias The minimum required bandwidth for the queue. di traffict shaper.

                bandwidth memang dapat, di gambar terlihat tidak ada packet yg drops. tapi prioritynya tidak ada,masuk akal  penyebab tertunda…, guaramtee bw udah bener, garantee priority, delay / latency gimana ya ?

                prio.JPG
                prio.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • P
                  pfz
                  last edited by

                  itu pakai HFSC semua.

                  Gak pakai limiter ?

                  BW nya gede sekali ya 200 MB >> em0 (wan) apa benar segitu ?
                  P2P juga gede apa banyak yang menggunakan peer to peer ?

                  jadi disitu traffic squid lusca di handle pakai traffic http?

                  malah DNS ikut traffic kecil ?

                  interface OPT gak di manage BW nya ?

                  mengenai prioriti, kalo bw HFSC priotiry tertinggi 7 terendah 1 dan 0 (tanpa priority)

                  sedangkan mengenai curve m1 d m2 kalo salah menempatkannya malah gak berjalan karena bisa jadi ada duplicate rules traffic. Coba baca lagi kaidah, HFSC di awal thread.

                  sayangnnya pfctl -sn gak di copikan.

                  1 Reply Last reply Reply Quote 0
                  • E
                    extreemblank
                    last edited by

                    iya pak HFSC semua, setnya kan di parent wan sama lan, belum saya coba dicampur dengan yg lain.

                    BW nya gede sekali ya 200 MB >> em0 (wan) apa benar segitu ? >> bukan em0 tuh pak, qlink di em1, belum dipake juga (belum ada rule menuju kesini), rencana mau jadi quee khusus internal misal akses web gui, ssh, cache hit dll.

                    squid juga belum sy pasangkan.. ni mesin fresh install.. interface OPT gak dipake pak, hanya ada wan dan lan saja.

                    
[2.0.2-RELEASE][admin@pxzens.localdomain]/root(1):  pfctl -sn
no nat proto carp all
nat-anchor "natearly/*" all
nat-anchor "natrules/*" all
nat on em0 inet from 192.168.1.0/24 port = isakmp to any port = isakmp -> 192.168.0.3 port 500
nat on em0 inet from 127.0.0.0/8 port = isakmp to any port = isakmp -> 192.168.0.3 port 500
nat on em0 inet from 192.168.1.0/24 to any -> 192.168.0.3 port 1024:65535
nat on em0 inet from 127.0.0.0/8 to any -> 192.168.0.3 port 1024:65535
no rdr proto carp all
rdr-anchor "relayd/*" all
rdr-anchor "tftp-proxy/*" all
rdr-anchor "miniupnpd" all

                    tuh fresh install banget..

                    dns ikut kecil iya memang butuhnya kecil tapi masuk ke class critical kalo di saya  di realtime m2, gak pake set kurva berapa detik, langsung apapun kondisinya dns dapat minimal m2=2% dari induknya. hasilnya (4k) saja. sementara masih ok belum pernah terlihat drops di queue.

                    qp2p belum saya set, nanti juga mau sy hapus. juga belum dipake, defaultnya adalah qweb itu, jadi semua traffict yang tidak di atur akan pergi ke qweb defaultnya. yang saya set max.nya adalah 200kbits hard limit di upperlimit m2 = 80% dari induknya qinternet 250k, dan memang jadi 200k di pftop terlihat sekali.

                    hard limit di upperlimit m2 memang ampuh, karena di set default, saya coba itu segala macam downloader hanya mampu max. 200k, sayangnya termasuk akses webgui dan ssh jadi lari kesini juga  :'(

                    saya baru test download pake idm dan perhatikan ping dan game. itu saja dulu.., terlimit memang berhasil, ping tidak pernah timeout cuma terdelay iya sekitar 1 detik, begitu juga game.. duh

                    HFSC priotiry tertinggi 7 terendah 1 dan 0 (tanda priority) >> masalahnya pak itu, priority yg kita set di web gui gak ada di /tmp/rules.debug, sebenernya sudah saya set di web guinya. apa bug kah ini?, sy make 2.0.2.

                    emgnya pakde pake versi berapa pfsense nya ?

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfz
                      last edited by

                      Saya pakai 2.0.3 dan 2.1

                      Memang priorty tidak terlihat di/tmp/rules.debug

                      Upperlimit memang mantap.
                      Tapi pertanyaan kalo ada user 100 pada waktu bersamaan donwload semua pakai IDM trus gimana?

                      Kalo menggunakan paket squid akan lebih efektif kalo batas download menggunakan throttling per host kalo mau ekstren pakai overal bandwidth thrortling. (Tapi sesuaikan dengan kondisi jaringan yg ada).

                      1 Reply Last reply Reply Quote 0
                      • E
                        extreemblank
                        last edited by

                        Saya pakai 2.0.3 dan 2.1

                        Memang priorty tidak terlihat di/tmp/rules.debug

                        Upperlimit memang mantap.
                        Tapi pertanyaan kalo ada user 100 pada waktu bersamaan donwload semua pakai IDM trus gimana?

                        Kalo menggunakan paket squid akan lebih efektif kalo batas download menggunakan throttling per host kalo mau ekstren pakai overal bandwidth thrortling. (Tapi sesuaikan dengan kondisi jaringan yg ada).

                        ngomong2 soal squid, hdd saya kemarin tu jebol, pake lusca. sementara testing shaping ini gak pake squid dulu pure traffict shaping. mengenai overall bw limit / throtling di traffict shaping sangat mudah juga trnyata tinggal set  Upperlimit: m2= max bw lalu jadikan default, rule2 gak usah diset, semuanya jadi terlimit.

                        atau mau ky ada throtlenya m1=90%, d=3000(3detik), m2=40%.  mantep jadinya.,  sudah saya test pakde.

                        sampe 100 ?, wkwkw komputer darimana pak de, sementara sudah saya coba di 5 kompie IDMan, canggih juga ni pfsense, otomatis di bagi rata semua yg idm, dan sepertinya di throtle2 otomatis, jadi gak melulu dapat rendah transfer ratenya. semua gonta ganti dapat fullnya ( sesuai batasan max. di queue tentunya)

                        saya yg pake laptop masih juga bisa browsing, total berarti 6.. dan ping tetap rendah, kecuali 1 detik pertama.. hiks  :'(

                        sebenarnya kalo buat game pb gak masalah kynya, cuman ada beberapa game, walau delay 1 detik gak bs diterima. ky game battlefield 2, dan 3…,bingung abis dah.. gimana caranya?, ping dan port udp gak pula membutuhkan ack seperti halnya tcp.. yg pakde post diawal2 thread ini.

                        btw. canggih juga firefox, kabel kesenggol postingan yg dibuat gak ilang.. firefoxnya apa forum ini yg canggih

                        1 Reply Last reply Reply Quote 0
                        • E
                          extreemblank
                          last edited by

                          @PakDe:

                          itu pakai HFSC semua.

                          Gak pakai limiter ?

                          tanpa qwan kynya gpp pake de, Enable/Disable Enable/disable discipline and its children, disable quee di wan hasilnya sama aja, download tetap terlimit, ping juga begitu, ping dan game aman (*setelah 1 detik  ;)  ),

                          tapi kalo qlan yg didisable baru qosnya gak jalan. hmm.., download jadi kencang, ping morat marit.. jadi gimana tuh sebenarnya.. makin puyeng dah.  ???

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfz
                            last edited by

                            kalo saya sendiri murni HFSC.

                            Idealnya dalam hfsc itu ada qlan dan qwan. Tapi kalo suka pakai costum (dan yang penting nyaman user dan admin nya) ya gak apa-apa sih.

                            TIP:
                            Dalam metode  apapun sebuah QOS itu pasti  ada outbound dan inbound kalo dalam pf (packet filter) dicerminkan dalam wan dan lan.
                            Nah, implementasi ALTQ HFSC diperlukan pengamatan ke dalam jaringan internal supaya mendapatkan angka yang dirasa pass dan nyaman buat user dan sysadmin nya.

                            1 Reply Last reply Reply Quote 0
                            • P
                              pfz
                              last edited by

                              TIP : membagi BW ke IP IIX

                              Setelah buat Aliase daftar IP IIX, dan buat batas BW nya.
                              Buat Rules yang mengarah ke Aliase IIX dan berikan spesifik BW sudah diplot.

                              Ingat ini bukan routing dengan BGP (kalo pakai BGP ke AS gateway lain tentu berbayar) ..
                              TAPI memberikan prioroty BW yang lebih besar ke IP IIX.

                              Semoga bermanfaat.

                              1 Reply Last reply Reply Quote 0
                              • P
                                pfz
                                last edited by

                                @extreemblank:

                                btw… set priority di quee gak jalan ya?

                                saya cek di /tmp/rules.debug gak dibikinin tuh Priority sama padahal sudah di set, ngebug atau gimana tuh pak?

                                Set Priority sebenarnya juga terlihat.

                                Seperti yg dimodifikasi oleh jvorshees.
                                Under Attachment
                                Gambar dibawah ini.

                                pftop.JPG
                                pftop.JPG_thumb

                                1 Reply Last reply Reply Quote 0
                                • E
                                  extreemblank
                                  last edited by

                                  ahh lama gak muncul nih…, kemarin dapat kesibukan lain.

                                  wah menarik juga pak. oya gimana caranya tuh pakde ?, pfsense versi berapa ?

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.