Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense 2.4 Shaping for Cisco VPN workstation, & general Roku/Fire/Apl streaming

    Scheduled Pinned Locked Moved 2.4 Development Snapshots
    11 Posts 3 Posters 9.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nullity
      last edited by

      With your setup, PRIQ is likely never going to be optimal. Use CBQ, HFSC, or FAIRQ so that you can allocate bandwidth amounts.

      Though, you did not give us enough details to even begin helping you. What exactly have you tried? What were the expected results and the actual results?

      First you need to get your firewall rules to grab the proper traffic, which should be easy. Read the pfSense wiki.
      Once that is worked out you can move on to setting up your traffic-shaping queues and testing them.

      Please correct any obvious misinformation in my posts.
      -Not a professional; an arrogant ignoramous.

      1 Reply Last reply Reply Quote 0
      • D
        DJRumpy
        last edited by

        I've tried the built in wizard, using a single LAN/WAN for PRIQ, and HFSC, and then tried assigning floating rules to the resulting queues, but not much luck. I also have a set of fairly broad floating rules to match traffic using a quick rule and assign it to a queue, but when looking at the actuals STATUS–> QUEUES, I see no traffic in those.

        I don't see a way to export these rules so that you can examine them offline.

        The irritating part is this seems relatively simple. Capture traffic to/from various IP's locally or from the WAN interface, and assign it to a queue, and my rules keep coming up empty.

        1 Reply Last reply Reply Quote 0
        • N
          Nullity
          last edited by

          @DJRumpy:

          I've tried the built in wizard, using a single LAN/WAN for PRIQ, and HFSC, and then tried assigning floating rules to the resulting queues, but not much luck. I also have a set of fairly broad floating rules to match traffic using a quick rule and assign it to a queue, but when looking at the actuals STATUS–> QUEUES, I see no traffic in those.

          I don't see a way to export these rules so that you can examine them offline.

          The irritating part is this seems relatively simple. Capture traffic to/from various IP's locally or from the WAN interface, and assign it to a queue, and my rules keep coming up empty.

          Scroll down to the bottom of this page on the pfSense wiki.

          Please correct any obvious misinformation in my posts.
          -Not a professional; an arrogant ignoramous.

          1 Reply Last reply Reply Quote 0
          • D
            DJRumpy
            last edited by

            Ok, I've turned off quick match on all of the floating rules that I'm using to assign a queue.

            Let me start with a basic one. Netflix.

            23.246.0.0-23.246.63.255 or 23.246.0.0/18

            I want to capture traffic from that source range to my WAN or LAN interface, and assign it to my streaming queue.

            I've setup two rules, with both interfaces selected. One rule with the Source set to that network/mask, and the other rules with the destination set to that network/mask.

            I could also go in and assign my aliased network streaming devices with a source to/from that mask as well, and I should see it capturing some traffic, yes?

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              Did you go into the Advanced options and direct the traffic into a predefined queue in the Queues section?

              1 Reply Last reply Reply Quote 0
              • D
                DJRumpy
                last edited by

                Yes I also reset the states, but no luck so far

                1 Reply Last reply Reply Quote 0
                • D
                  DJRumpy
                  last edited by

                  I do see an error reloading the filters.

                  Checking for filter PF hooks in package /usr/local/pkg/miniupnpd.inc
                  There were error(s) loading the rules: pfctl: linkshare sc exceeds parent's sc - The line in question reads [0]:

                  I'm not sure where to start on this one.

                  1 Reply Last reply Reply Quote 0
                  • D
                    DJRumpy
                    last edited by

                    Ok. That problem is tesolved. I trashed the shaper and started over. Removed any quick rules, and still no luck seeing any captured data from the rules.

                    1 Reply Last reply Reply Quote 0
                    • N
                      Nullity
                      last edited by

                      @DJRumpy:

                      Ok. That problem is tesolved. I trashed the shaper and started over. Removed any quick rules, and still no luck seeing any captured data from the rules.

                      Post a screenshot of your rules.

                      Please correct any obvious misinformation in my posts.
                      -Not a professional; an arrogant ignoramous.

                      1 Reply Last reply Reply Quote 0
                      • D
                        DJRumpy
                        last edited by

                        Screenshot of the floating rules.

                        ![Screen Shot 2016-12-06 at 7.46.52 AM.png](/public/imported_attachments/1/Screen Shot 2016-12-06 at 7.46.52 AM.png)
                        ![Screen Shot 2016-12-06 at 7.46.52 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-12-06 at 7.46.52 AM.png_thumb)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.