Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traffic Shaper: Limiter

    Scheduled Pinned Locked Moved Traffic Shaping
    41 Posts 17 Posters 18.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      n3by
      last edited by

      Is only 6 months old bug, whats the rush… it needed > 2 years to fix Schedule States bug and this new one appeared in exchange.  :'(

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        This Limiter thing on 2.2 is a real downer.  It's beginning to feel like they don't know how to fix it.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • SamTzuS
          SamTzu
          last edited by

          Still nothing about Bug #4326

          https://doc.pfsense.org/index.php/2.2.5_New_Features_and_Changes

          1 Reply Last reply Reply Quote 0
          • H
            Harvy66
            last edited by

            It's currently listed under 2.3

            https://redmine.pfsense.org/issues/4326

            1 Reply Last reply Reply Quote 0
            • A
              a_null
              last edited by

              Wanted to inquire to see if anyone had additional info on this.

              https://redmine.pfsense.org/issues/4326

              \x0

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                No, it's still broken obviously as you can see from the bug status.

                1 Reply Last reply Reply Quote 0
                • A
                  a_null
                  last edited by

                  Yeah - I had that, which is why I asked if anyone had ADDITIONAL info, and not "is it fixed yet?" But thanks for playing.

                  \x0

                  1 Reply Last reply Reply Quote 0
                  • E
                    externalz
                    last edited by

                    @Derelict:

                    This Limiter thing on 2.2 is a real downer.  It's beginning to feel like they don't know how to fix it.

                    After almost 12 months, i am starting to get that vibe to brother. Not sure how long i can hold back on security updates for this bug :/

                    1 Reply Last reply Reply Quote 0
                    • A
                      angkotband1996
                      last edited by

                      @SamTzu:

                      Firewall: Traffic Shaper: Limiter
                      I rebuilt our firewall because the new pfSense broke our traffic shaping rules.
                      After export/import ruleset I still can't get traffic shaping to work on firewall WAN rules.
                      It seems to work fine on outgoing LAN rules though.

                      Any ideas why it stopped working on WAN side?

                      This setup used to work before on incoming traffic, now it breaks the rule if I do this.

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        I think if you have port forwards on an interface it makes limiters appear like they're completely bypassed. In other situations, interfaces with limiters simply stop passing traffic.

                        Not sure if that's what you're seeing since "breaks the rule" is not very descriptive.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • A
                          a_null
                          last edited by

                          @Derelict:

                          I think if you have port forwards on an interface it makes limiters appear like they're completely bypassed. In other situations, interfaces with limiters simply stop passing traffic.

                          Not sure if that's what you're seeing since "breaks the rule" is not very descriptive.

                          Yeah - not sure about OP, but for me, "stops passing traffic" is a deal breaker.  :(

                          \x0

                          1 Reply Last reply Reply Quote 0
                          • I
                            interkrome
                            last edited by

                            I assigned the IN/OUT limiter to LAN interface instead of WAN. It works which (who ever in my PenaltyBox) it served the speed that I set.

                            But, i have one doubt on the limit. what is the minimum speed to allow for web access? i set 1024kbps/512kbps still not able to but i managed to access youtube and facebook website.

                            2.2.6-RELEASE (amd64)

                            1 Reply Last reply Reply Quote 0
                            • N
                              Nullity
                              last edited by

                              @interkrome:

                              I assigned the IN/OUT limiter to LAN interface instead of WAN. It works which (who ever in my PenaltyBox) it served the speed that I set.

                              But, i have one doubt on the limit. what is the minimum speed to allow for web access? i set 1024kbps/512kbps still not able to but i managed to access youtube and facebook website.

                              2.2.6-RELEASE (amd64)

                              I do not understand precisely what you are asking. Can you rephrase/clarify?

                              Please correct any obvious misinformation in my posts.
                              -Not a professional; an arrogant ignoramous.

                              1 Reply Last reply Reply Quote 0
                              • F
                                foresthus
                                last edited by

                                @doktornotor:

                                https://redmine.pfsense.org/issues/4326

                                Nice to see that there is a ticket, but this ticket is nearly 1 year old. Is that a bug aswell? I hope to see a fix as sson as possible. :-[

                                1 Reply Last reply Reply Quote 0
                                • I
                                  interkrome
                                  last edited by

                                  @Nullity:

                                  I do not understand precisely what you are asking. Can you rephrase/clarify?

                                  What is the minimum speed to set for website access like espn, BBC, nbc, etc. I found out only when I remove the limiter, it allow these page to load. If I set 1024/512 it doesn't load. The weird thing is it loads YouTube (can play the video) and Facebook (can comment, post pic, etc). Google search also loaded but whenever I click the link, the page failed to load ; with limiter enabled. Tested the speed via speedtest.net it shows as what I set.

                                  I set IN/OUT limiter on LAN interface. Tried on WAN interface, limiter not working.

                                  1 Reply Last reply Reply Quote 0
                                  • N
                                    Nullity
                                    last edited by

                                    @interkrome:

                                    @Nullity:

                                    I do not understand precisely what you are asking. Can you rephrase/clarify?

                                    What is the minimum speed to set for website access like espn, BBC, nbc, etc. I found out only when I remove the limiter, it allow these page to load. If I set 1024/512 it doesn't load. The weird thing is it loads YouTube and Facebook. Google search also loaded but whenever I click the link, the page failed to load ; with limiter enabled.

                                    Rate-limiting should only affect how quickly a page loads, not whether the page will load or not load.

                                    It seems like you are encountering a limiter's bug or an unrelated bug.

                                    Please correct any obvious misinformation in my posts.
                                    -Not a professional; an arrogant ignoramous.

                                    1 Reply Last reply Reply Quote 0
                                    • I
                                      interkrome
                                      last edited by

                                      @Nullity:

                                      Rate-limiting should only affect how quickly a page loads, not whether the page will load or not load.

                                      It seems like you are encountering a limiter's bug or an unrelated bug.

                                      OK. Let say a page should be fully loaded in 10 seconds with total size of 100 mb of data. So it takes around 10 seconds if i set 10mbps. So if I set it less than that, it will takes more time to load. Let say I set 1mbps, it should take 100 seconds or if I set 512kbps then it should take around 200 seconds to get fully loaded. What makes me wondering why page like Facebook and YouTube can be loaded (play video, read comments, etc) when my limit is 1mbps but not other pages. Not even landed to that address except YouTube and Facebook. Only these so far is accessible with the limiter. Weird.

                                      Anyway. Thank you for your respond!

                                      1 Reply Last reply Reply Quote 0
                                      • I
                                        interkrome
                                        last edited by

                                        It breaks at ipv6 address. That explained my situation

                                        2.2.6-RELEASE (amd64)

                                        1 Reply Last reply Reply Quote 0
                                        • SamTzuS
                                          SamTzu
                                          last edited by

                                          High priority bug that has broken a key function in pfSense firewall has been unsolved for over a year now.

                                          No proposals how to fix it. No descriptions on what actually broke, why it broke and what could be the best paths to solving the problem.

                                          What is going on here? My faith in you is fading. Is this how you usually deal with High priority bugs? Who dares to take responsibility for this?

                                          Sam

                                          https://redmine.pfsense.org/issues/4326

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            killmasta93
                                            last edited by

                                            Theres a workaround for squid with limiter  But it breaks NAT reflection :(

                                            Tutorials:

                                            https://www.mediafire.com/folder/v329emaz1e9ih/Tutorials

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.