Apply shaper to physical interface?
-
I'm trying to learn about the traffic shaper in pfsense, which appears to be extremely flexible. In searching, I encountered a thread that should probably be a sticky:
https://forum.pfsense.org/index.php?topic=79589.90
In that thread, post 7, georgeman suggests that "You can use VLANs on the same interface + an L2 switch, and apply the shaper to the physical interface"
I use vlans over a LAGG interface (LACP) and I was trying to figure out how to apply the shaper to the physical interface. It seems like it'd be a good solution to shape different vlan's as if they were one (So, for example, DNS over VLAN1 would get priority over P2P over VLAN2.) However, the physical interface doesn't appear to be provided as an option for me in the shaper. Just "WAN" and my VLAN's.
Is there a way to do that? Or, perhaps that advice is no longer relevant? (Or do I need to go into the "interfaces" page and assign "LAGG0" to a new interface, name it something like "UNUSED", leave with it with IP, etc, and then apply shaper to that "UNUSED" interface?)
Thank you
Gary -
LAGG interfaces do not support ALTQ shaping natively, so the advice on that thread can't work with LAGG. IIRC it still works with single interfaces, provided the driver supports ALTQ. VLANs on LAGG can do ALTQ because VLANs are compatible, just not plain LAGG interfaces.
-
I'm still around, glad that post is still useful ;D
Not sure about LAGG, but with regular VLANs I found the best way is the following (call it bug or feature, you choose):
- Send LAN1 traffic untagged
- Send LAN2 traffic tagged as some VLAN
- Send any other LAN network traffic tagged as well
Then, from a shaper standpoint, you will see all the traffic from all the VLANs on the LAN1 (untagged) interface
Yes, I know, some networking purists will complain that you should not send untagged traffic on a trunk, but it works
If you choose to go with something like this, you need at least two separate physical interfaces, one for your LAN VLANs and another for your WAN VLANs
