Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to pfsense, what are my options? Need help!

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    27 Posts 5 Posters 4.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      You know what? Stick with Tomato… I don't see this thread getting anywhere near anything productive. Noone can debug your QoS attempts with unknown configuration. And frankly, while the horrible proxy thing is in place, you won't get any decent shaping at all using the traffic shaper. If you insist, play with stuff like Squid's delay pools or whatnot.

      1 Reply Last reply Reply Quote 0
      • N
        ns7979
        last edited by

        @doktornotor:

        You know what? Stick with Tomato… I don't see this thread getting anywhere near anything productive. Noone can debug your QoS attempts with unknown configuration.

        What information would be needed to debug my QoS? I'd be happy to provide any information that would be helpful, screenshots of my configs, whatever.

        I would be happy to stick with tomato but it can't do web caching or offer the level of parental controls which is what brought me to pfsense.

        What steps would I need to take to setup pfsense behind my tomato router, and let tomato handle Gateway, DHCP, QoS and have the pfsense box handle Firewall/NAS/Proxy/Web Filtering/DNS, etc?

        I was thinking something like this:

        Internet –> Tomato Router (QoS/DHCP) --> Pfsense Box ---> Switch ---> LAN

        @doktornotor:

        And frankly, while the horrible proxy thing is in place, you won't get any decent shaping at all using the traffic shaper. If you insist, play with stuff like Squid's delay pools or whatnot.

        Like I've stated several times now all my QoS testing was done with the proxy disabled, and now I am running with no packages installed and getting the same results.

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          I'd dump whatever I didn't need.  Squid would be at the top of my list.

          Then I'd set up simple traffic shaping.

          Try that.

          1 Reply Last reply Reply Quote 0
          • N
            ns7979
            last edited by

            @kejianshi:

            I'd dump whatever I didn't need.  Squid would be at the top of my list.

            Then I'd set up simple traffic shaping.

            Try that.

            @ns7979:

            I had squid disabled during all my QoS trial and error, as to not complicate things.

            @ns7979:

            I have tried many many many different combinations of QoS settings with pfsense and none of them have lead to a useable internet connection… even with no other packages installed and only 1 device connected to the pfsense box which is connected directly into my internet connection.

            @ns7979:

            Like I've stated several times now all my QoS testing was done with the proxy disabled, and now I am running with no packages installed and getting the same results.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              After abit of reading, I just noticed.  No hardware specs.

              What is this running on?  CPU?  RAM?  Disk space?  etc etc…

              I can imagine, for instance that if your machine was running low on ram and was deep into swap usage things might get pretty laggy.

              (So, by "disabled" you mean there is no squid installed on your system?)

              1 Reply Last reply Reply Quote 0
              • N
                ns7979
                last edited by

                @kejianshi:

                After abit of reading, I just noticed.  No hardware specs.

                What is this running on?  CPU?  RAM?  Disk space?  etc etc…

                I can imagine, for instance that if your machine was running low on ram and was deep into swap usage things might get pretty laggy.

                (So, by "disabled" you mean there is no squid installed on your system?)

                Yes, by disabled I mean I removed all the packages related to squid to rule them out.

                System stats:

                Name pfSense.localdomain
                Version 2.2.1-RELEASE (amd64)
                built on Fri Mar 13 08:16:49 CDT 2015
                FreeBSD 10.1-RELEASE-p6

                You are on the latest version.
                Platform cdrom
                CPU Type AMD Athlon™ 64 X2 Dual Core Processor 5000+
                2 CPUs: 1 package(s) x 2 core(s)
                Uptime 01 Hour 49 Minutes 45 Seconds
                Current date/time
                Wed Mar 25 21:58:31 UTC 2015
                DNS server(s) 127.0.0.1
                8.8.8.8
                8.8.8.1
                Last config change Wed Mar 25 21:08:01 UTC 2015
                State table size
                0% (126/303000)
                Show states
                MBUF Usage
                1% (1270/189286)
                Load average
                0.00, 0.02, 0.00
                CPU usage
                (Updating in 10 seconds)
                Memory usage
                7% of 3036 MB
                Disk usage
                / (cd9660): 100% of 223M
                /tmp (ufs in RAM): 17% of 19M
                /var (ufs in RAM): 61% of 31M
                /etc (ufs in RAM): 42% of 19M
                /usr (unionfs): 94% of 242M
                /conf (ufs in RAM): 1% of 5.4M
                /home (ufs in RAM): 0% of 5.4M

                last pid: 38297;  load averages:  0.01,  0.02,  0.00  up 0+01:49:17    21:58:03
                123 processes: 3 running, 99 sleeping, 21 waiting

                Mem: 47M Active, 45M Inact, 173M Wired, 134M Buf, 2692M Free

                1 Reply Last reply Reply Quote 0
                • N
                  ns7979
                  last edited by

                  Oh, and I am running off the live CD at the moment… testing QoS setups with a clean install with no additional packages. When I was using squid it was running from a hard drive install on the 80GB SSD drive in the box.

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    No idea.  I wouldn't be testing a livecd though.  Thats just me.

                    Keep banging away.  It can be done.

                    1 Reply Last reply Reply Quote 0
                    • N
                      ns7979
                      last edited by

                      @kejianshi:

                      No idea.  I wouldn't be testing a livecd though.  Thats just me.

                      Keep banging away.  It can be done.

                      I hear ya, I've been switching back and forth between the live cd and hd install to see if it made any differences… but nope.. same results either way.

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        You will get some additional latency with shaping.

                        1 Reply Last reply Reply Quote 0
                        • N
                          ns7979
                          last edited by

                          @kejianshi:

                          You will get some additional latency with shaping.

                          Well with Tomato QoS I am able to get consistently under 100ms ping times even when the bandwidth is saturated… and voip / games / etc remains low latency and lag free. It took some learning to setup, but I had it up and running great in a couple of hours of tweaking and fine tuning and it has been working without a hitch for a couple of years now.

                          Ideally I'd like to setup the pfsense firewall between the tomato router (gateway) and the rest of my LAN (switch) and let tomato handle QoS/DHCP and let the pfsense box handle everything else (Proxy/Filtering/Firewall/NAS/DNS/OpenVPN) but I am not sure what steps to take to set this up and I am not having any luck finding information on how to make it work...

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            That configuration is the opposite of ideal.  Also, how are you measuring latency?

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.