Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Playing with fq_codel in 2.4

    Scheduled Pinned Locked Moved Traffic Shaping
    1.1k Posts 123 Posters 1.5m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nullity
      last edited by

      @HeatmiserNYC:

      Cool, thanks for replying.

      Yes, I get about 125-130 down when I set my limiter to 143mb (95%). My connection without the limiter will tend to burst initially to a bit over 200mb according to testmy.net. I have a simple setup following the guide detailed in the first post.

      I use the VPN for all outbound traffic, it's not a separate situation.

      I have tried traffic shaping before and this has been true for any configuration I have ever tried. If I try to shape close to my line speed it takes about 20mb off the top. How do you not use a bandwidth limit? Adding a delay limit in the field doesn't take.

      Just need a successful example of this to get running…

      Again, thanks.

      Perhaps your speed drop is related to overhead like VPN, TCP, etc. I assume you are referring to goodput bitrates?

      On downloads you will commonly see below the configured bitrate because each time you hit the limit pfSense will tell the sender to slow down below the limit. Personally, I found very little useful benefit by limiting downloads because my ISP has minimal bufferbloat and allowing them to do the rate-limiting gives me 100% speeds.

      Please correct any obvious misinformation in my posts.
      -Not a professional; an arrogant ignoramous.

      1 Reply Last reply Reply Quote 0
      • w0wW
        w0w
        last edited by

        What about to try to move shaper/limiters from LAN side to VPN side firewall rules?

        1 Reply Last reply Reply Quote 0
        • H
          HeatmiserNYC
          last edited by

          That's an idea, I'll give that a shot!

          1 Reply Last reply Reply Quote 0
          • H
            HeatmiserNYC
            last edited by

            Yea, that didn't work.

            1 Reply Last reply Reply Quote 0
            • w0wW
              w0w
              last edited by

              Just for testing purpose, try to change bw limiting to delay limiting :

              pipe 1 config delay 0ms
              

              for both pipes

              1 Reply Last reply Reply Quote 0
              • H
                HeatmiserNYC
                last edited by

                Sorry gone for a few days, vacation.

                I gave that a shot by changing the /tmp file, it doesn't seem to have an affect. I am only changing the /tmp file, maybe it needs to be rebooted and hardcoded into the file? The only reason I haven't done this is because I haven't seen the results everybody is reporting…

                1 Reply Last reply Reply Quote 0
                • w0wW
                  w0w
                  last edited by

                  Yes it's need to be rebooted or reloaded with```
                  /etc/rc.reload_all

                  After you did that run the following command```
                  ipfw sched show
                  ```and you should see something like```
                  00001: unlimited         0 ms burst 0
                  ```for the both pipes you have.
                  1 Reply Last reply Reply Quote 0
                  • H
                    HeatmiserNYC
                    last edited by

                    @w0w:

                    Yes it's need to be rebooted or reloaded with```
                    /etc/rc.reload_all

                    After you did that run the following command```
                    ipfw sched show
                    ```and you should see something like```
                    00001: unlimited         0 ms burst 0
                    ```for the both pipes you have.
                    

                    Yes, all relatively simple and you've been great at walking through the steps you put in place.

                    I'm getting this for both pipes.

                    00003: unlimited        0 ms burst 0

                    00004: unlimited        0 ms burst 0

                    Yet I can't get better than a B rating for bufferbloat, which is the same if I literally do nothing at all….

                    1 Reply Last reply Reply Quote 0
                    • w0wW
                      w0w
                      last edited by

                      But what about VPN bandwidth? Are you still getting 120Mbps?

                      1 Reply Last reply Reply Quote 0
                      • H
                        HeatmiserNYC
                        last edited by

                        That part HAS improved, looks like it does get about 145-ish or so which is about right. It just does nothing for bufferbloat.

                        1 Reply Last reply Reply Quote 0
                        • w0wW
                          w0w
                          last edited by

                          Can you post the full output of```
                          ipfw sched show

                          1 Reply Last reply Reply Quote 0
                          • M
                            moscato359
                            last edited by

                            I'd like to look at implementing this, but I was wondering

                            Anyone know the status of pfsync + limiters?

                            1 Reply Last reply Reply Quote 0
                            • w0wW
                              w0w
                              last edited by

                              @moscato359:

                              I'd like to look at implementing this, but I was wondering

                              Anyone know the status of pfsync + limiters?

                              What was the last status you know?  :D

                              1 Reply Last reply Reply Quote 0
                              • M
                                moscato359
                                last edited by

                                The last status I know is that the pfsense book says not to use pfsync and limiters together, but doesn't explain why

                                1 Reply Last reply Reply Quote 0
                                • w0wW
                                  w0w
                                  last edited by

                                  @moscato359:

                                  The last status I know is that the pfsense book says not to use pfsync and limiters together, but doesn't explain why

                                  This is actual. https://redmine.pfsense.org/issues/4310 have 0% progress.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    moscato359
                                    last edited by

                                    @w0w:

                                    @moscato359:

                                    The last status I know is that the pfsense book says not to use pfsync and limiters together, but doesn't explain why

                                    This is actual. https://redmine.pfsense.org/issues/4310 have 0% progress.

                                    D=

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      moscato359
                                      last edited by

                                      Is there any chance fq_codel will make it into the 2.4 GUI in limiters?

                                      1 Reply Last reply Reply Quote 0
                                      • w0wW
                                        w0w
                                        last edited by

                                        Definitely not!
                                        They are keeping eyes on it, but currently no plans, no moves, AFAIK.

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          sofakng
                                          last edited by

                                          Darn.  I'm thinking about switching back to pfSense but I really want fq_codel.

                                          1 Reply Last reply Reply Quote 0
                                          • H
                                            Harvy66
                                            last edited by

                                            fq_codel, the ZFS of AQMs, or nearly. Cake aims to be the "ZFS", but close enough.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.