Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traffic limiter not affective

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    16 Posts 3 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      Do you have port forwards for your bittorrent ports?  UPnP opening ports for bittorrent clients?

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • I
        Iahmad
        last edited by

        @Derelict:

        Do you have port forwards for your bittorrent ports?  UPnP opening ports for bittorrent clients?

        please explain little bit.

        i try try to limit the bandwidth for single ip and its work but not for alieses, and if i add single single ips than the cpu usage goes to to 70 percent.

        i need to limit bandwith for group of clients who are creating probelm for the valid trafic.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Are you trying to limit bittorrent?  If so, do you have port forwards for specific bittorrent ports OR are you allowing bittorrent clients to use UPnP to open ports for themselves?

          It matters because incoming connections won't be caught be the shaper rules if either of those conditions are true.

          Actually, it's true for any time ports are forwarded from WAN to LAN regardless of protocol.

          It looks like I might be confusing this with another thread that explicitly mentioned bittorrent.  If so and I'm unnecessarily complicating things, my apologies.

          There is no way the limiter is using 70% CPU.  What else are you doing?

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • I
            Iahmad
            last edited by

            @Derelict:

            Are you trying to limit bittorrent?  If so, do you have port forwards for specific bittorrent ports OR are you allowing bittorrent clients to use UPnP to open ports for themselves?

            It matters because incoming connections won't be caught be the shaper rules if either of those conditions are true.

            Actually, it's true for any time ports are forwarded from WAN to LAN regardless of protocol.

            It looks like I might be confusing this with another thread that explicitly mentioned bittorrent.  If so and I'm unnecessarily complicating things, my apologies.

            There is no way the limiter is using 70% CPU.  What else are you doing?

            dear  i dont care of bittorrent i just want to limit their bandwith so the other never disturb.

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              What you've done will do that.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • I
                Iahmad
                last edited by

                @Derelict:

                What you've done will do that.

                dear derelict,

                sorry for late reply, pf-sense is helping me lot. at LAN i fixed speed for all user and than give some managers to full access. it works for me.

                now i have two problems

                1. 1st torrent is still problem when i make test on clinet they are good with limit speed. but when i saw traffic graphs user are exceeding than the given limits i fixed 512 Kb but client showing 1.12 mbps. image attached

                2. i want to monitor the live traffic like let say if a user goes for some site than is there any monitor who shows the live traffic with website names traffic. i have ntop are bandwidthd but they only show ips….

                Regarding #1 i have attach images

                limiter.jpg
                limiter.jpg_thumb

                1 Reply Last reply Reply Quote 0
                • I
                  Iahmad
                  last edited by

                  professional please help

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    do you have port forwards for specific bittorrent ports OR are you allowing bittorrent clients to use UPnP to open ports for themselves?

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • I
                      Iahmad
                      last edited by

                      @Derelict:

                      do you have port forwards for specific bittorrent ports OR are you allowing bittorrent clients to use UPnP to open ports for themselves?

                      please little bit explain i never understand or just tell me..

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        The issue is if you have bittorrent configured to accept incoming connections you need to shape those differently.

                        This is usually accomplished by establishing a port in your client and putting a port forward in your firewall.  Sometimes the port is opened automatically using UPnP - possibly without your knowledge (though with pfSense I'm pretty sure UPnP is off by default.)

                        All that said, traffic shaping is not perfect.  It cannot control how much data is sent to you over the internet.  It can only control how much of that received data is sent out your LAN port.

                        ![Screen Shot 2014-12-03 at 10.50.53 PM.png](/public/imported_attachments/1/Screen Shot 2014-12-03 at 10.50.53 PM.png)
                        ![Screen Shot 2014-12-03 at 10.50.53 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2014-12-03 at 10.50.53 PM.png_thumb)

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • I
                          Iahmad
                          last edited by

                          @Derelict:

                          The issue is if you have bittorrent configured to accept incoming connections you need to shape those differently.

                          This is usually accomplished by establishing a port in your client and putting a port forward in your firewall.  Sometimes the port is opened automatically using UPnP - possibly without your knowledge (though with pfSense I'm pretty sure UPnP is off by default.)

                          All that said, traffic shaping is not perfect.  It cannot control how much data is sent to you over the internet.  It can only control how much of that received data is sent out your LAN port.

                          but we cannot go to clients one by one and enable or disable the port.
                          eventhough i apply layer 7 shaper but not affect. i limit speed per ip its also not affected.

                          i want to give each ip 512kbps no matter he downloads or browse

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            If you didn't enable UPnP or set port forwards in pfsense there's nothing to do at the client.  I'm just telling you my experience with rate-limiting bittorrent clients.  Only you know how your network is configured.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.