Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Playing with fq_codel in 2.4

    Scheduled Pinned Locked Moved Traffic Shaping
    1.1k Posts 123 Posters 1.7m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • occamsrazorO
      occamsrazor
      last edited by

      I just updated from 2.4.3 to the 2.4.4 release candidate and am keen to try out fq_codel. I haven't read all 434 (!) posts of this thread, but can anyone kindly point me to a basic beginner's guide or instructions to setting it up for a simple home connection?

      pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
      Ubiquiti Unifi wired and wireless network, APC UPSs
      Mac OSX and IOS devices, QNAP NAS

      KOMK 1 Reply Last reply Reply Quote 0
      • KOMK
        KOM @occamsrazor
        last edited by

        @occamsrazor Jimp did a quick bit on codel during the last Hangout, with a config example.

        https://www.youtube.com/watch?v=o8nL81DzTlU&t=380

        occamsrazorO 1 Reply Last reply Reply Quote 1
        • occamsrazorO
          occamsrazor @KOM
          last edited by

          @kom said in Playing with fq_codel in 2.4:

          @occamsrazor Jimp did a quick bit on codel during the last Hangout, with a config example.

          https://www.youtube.com/watch?v=o8nL81DzTlU&t=380

          Thanks. That's a nice and easy guide. I followed all the steps but wondering if I've done something wrong as the results are inferior to without. I'm on a 50MB dsl connection and before this got this result:

          <a href="http://www.dslreports.com/speedtest/39052963"><img src="http://www.dslreports.com/speedtest/39052963.png"></a>

          I had an A and A+ score so maybe the traffic shaper is not even needed. After enabling the shaper as per the video with WANDown bandwidth set to 50MB and WanUp set to 40MB, I get this:

          <a href="http://www.dslreports.com/speedtest/39053743"><img src="http://www.dslreports.com/speedtest/39053743.png"></a>

          My bufferbloat score is way worse as is my bandwidth. One thing I notice, when I go to PFSense > Status > Queues it says "Traffic shaping is not configured." - is that normal for this traffic shaping method?

          pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
          Ubiquiti Unifi wired and wireless network, APC UPSs
          Mac OSX and IOS devices, QNAP NAS

          Z 1 Reply Last reply Reply Quote 0
          • Z
            zwck @occamsrazor
            last edited by zwck

            @occamsrazor

            go to command prompt and type "ipfw sched show" and print the output please

            typo :( sorry

            occamsrazorO 1 Reply Last reply Reply Quote 0
            • occamsrazorO
              occamsrazor @zwck
              last edited by

              @zwck said in Playing with fq_codel in 2.4:

              ipfw shed show

              Thanks, output is:

              ipfw: bad command `shed'
              

              I set up the two limiters as in the video:

              0_1537256451183_Screen Shot 2018-09-18 at 10.39.21.jpg

              And the rule in the Firewall Floating tab:

              0_1537256567789_Screen Shot 2018-09-18 at 10.41.45.jpg

              Is there supposed to be something showing in the queues tab?

              0_1537256480988_Screen Shot 2018-09-18 at 10.39.28.jpg

              pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
              Ubiquiti Unifi wired and wireless network, APC UPSs
              Mac OSX and IOS devices, QNAP NAS

              1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan
                last edited by

                ipfw sched show
                

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                occamsrazorO 1 Reply Last reply Reply Quote 0
                • occamsrazorO
                  occamsrazor @Gertjan
                  last edited by

                  @gertjan said in Playing with fq_codel in 2.4:

                  ipfw sched show
                  

                  Thanks, output is:

                  00001:  50.000 Mbit/s    0 ms burst 0
                  q65537  50 sl. 0 flows (1 buckets) sched 1 weight 0 lmax 0 pri 0 droptail
                   sched 1 type FQ_CODEL flags 0x0 0 buckets 1 active
                   FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                     Children flowsets: 1
                  BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
                    0 ip           0.0.0.0/0             0.0.0.0/0        2      738  0    0   0
                  00002:  40.000 Mbit/s    0 ms burst 0
                  q65538  50 sl. 0 flows (1 buckets) sched 2 weight 0 lmax 0 pri 0 droptail
                   sched 2 type FQ_CODEL flags 0x0 0 buckets 0 active
                   FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                     Children flowsets: 2
                  

                  pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                  Ubiquiti Unifi wired and wireless network, APC UPSs
                  Mac OSX and IOS devices, QNAP NAS

                  1 Reply Last reply Reply Quote 0
                  • Z
                    zwck
                    last edited by zwck

                    @occamsrazor said in Playing with fq_codel in 2.4:

                    FQ_CODEL

                    sched shed shit :D

                    sorry for the typo, when you run the dslspeedtest you should see in this output if fq_codel is active, which from here it seems like it is.

                    1 Reply Last reply Reply Quote 0
                    • Z
                      zwck
                      last edited by

                      @mattund I watched the video linked before and end up with more question then before. Do we use masks or not. ? Do we use ECN or not, i remember on the upload side we should not use ECN.

                      1 Reply Last reply Reply Quote 0
                      • occamsrazorO
                        occamsrazor
                        last edited by occamsrazor

                        Not sure what changed but now my setup seems to be working OK...

                        https://www.dslreports.com/speedtest/39073625

                        This while doing speedtest:

                        Shell Output - ipfw sched show
                        
                        00001:  50.000 Mbit/s    0 ms burst 0
                        q65537  50 sl. 0 flows (1 buckets) sched 1 weight 0 lmax 0 pri 0 droptail
                         sched 1 type FQ_CODEL flags 0x0 0 buckets 1 active
                         FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                           Children flowsets: 1
                        BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
                          0 ip           0.0.0.0/0             0.0.0.0/0      653   974276  0    0   0
                        00002:  40.000 Mbit/s    0 ms burst 0
                        q65538  50 sl. 0 flows (1 buckets) sched 2 weight 0 lmax 0 pri 0 droptail
                         sched 2 type FQ_CODEL flags 0x0 0 buckets 1 active
                         FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                           Children flowsets: 2
                          0 ip           0.0.0.0/0             0.0.0.0/0       59     3149  0    0   0
                        

                        Is fq_codel adaptive to bandwidth in some way? I'm wondering what to put for the WAN bandwidth values in the limiter, as my speeds can sometimes vary during the day.

                        Also, I am running pfBlocker developer version. Should the fq_codel floating rule be above or below all the pfb rules?

                        pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                        Ubiquiti Unifi wired and wireless network, APC UPSs
                        Mac OSX and IOS devices, QNAP NAS

                        X KOMK 2 Replies Last reply Reply Quote 0
                        • X
                          xciter327 @occamsrazor
                          last edited by xciter327

                          @occamsrazor said in Playing with fq_codel in 2.4:

                          Not sure what changed but now my setup seems to be working OK...

                          https://www.dslreports.com/speedtest/39073625

                          This while doing speedtest:

                          Shell Output - ipfw sched show
                          
                          00001:  50.000 Mbit/s    0 ms burst 0
                          q65537  50 sl. 0 flows (1 buckets) sched 1 weight 0 lmax 0 pri 0 droptail
                           sched 1 type FQ_CODEL flags 0x0 0 buckets 1 active
                           FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                             Children flowsets: 1
                          BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
                            0 ip           0.0.0.0/0             0.0.0.0/0      653   974276  0    0   0
                          00002:  40.000 Mbit/s    0 ms burst 0
                          q65538  50 sl. 0 flows (1 buckets) sched 2 weight 0 lmax 0 pri 0 droptail
                           sched 2 type FQ_CODEL flags 0x0 0 buckets 1 active
                           FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                             Children flowsets: 2
                            0 ip           0.0.0.0/0             0.0.0.0/0       59     3149  0    0   0
                          

                          Is fq_codel adaptive to bandwidth in some way? I'm wondering what to put for the WAN bandwidth values in the limiter, as my speeds can sometimes vary during the day.

                          Also, I am running pfBlocker developer version. Should the fq_codel floating rule be above or below all the pfb rules?

                          The pfb rules are block/reject so it should not matter. This should only apply on pass/match rules depending on what You are trying to achieve.

                          ps. - I don't thin fq_codel is adaptive bandwidth. Normally I set it to 90% link speed a peak hours(like 8-9PM) in the evening.

                          1 Reply Last reply Reply Quote 1
                          • KOMK
                            KOM @occamsrazor
                            last edited by

                            @occamsrazor Conventional wisdom says to measure your WAN link speed several times throughout the week, at various times of the day, and then use 90-95% of your LOWEST value.

                            occamsrazorO 1 Reply Last reply Reply Quote 0
                            • occamsrazorO
                              occamsrazor @KOM
                              last edited by

                              @kom Thanks. I was doing some testing last night with the fq_codel download bandwidth set to 50Mbit, and when I was running a popular torrent I hit a sustained download rate of over 100Mbit. So it would seem to me that this "limit" isn't actually a hard limit. Can that be right? Or does fq_codel only affect TCP traffic (my torrent client is set to use uTP)

                              pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                              Ubiquiti Unifi wired and wireless network, APC UPSs
                              Mac OSX and IOS devices, QNAP NAS

                              KOMK 1 Reply Last reply Reply Quote 0
                              • KOMK
                                KOM @occamsrazor
                                last edited by

                                @occamsrazor I have no idea. I'm fairly dumb when it comes to QoS, and know just enough to be dangerous. I haven't played with codel at all.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  dtaht
                                  last edited by

                                  you should not be able to achieve a higher rate than htb (hfsc?) specifies. There are a lot of ways to configure htb wrong (like not classifying all packets correctly), there have also been bugs in some versions.

                                  Your initial result (2mbits!?) implied to me you'd got the kbit or mbit setting wrong.

                                  The oddity of your current result implies you are putting utp traffic into another bin entirely. try to build the simplest possible thing that feeds all packets into a single fq_codel instance. Post your code.

                                  The fq part of fq codel works on all packets, the codel part works well on anything that is tcp-friendly, which certainly includes utp and quic.

                                  I don't know enough about bsd to help, we found trying to configure this stuff in the linux sqm-scripts so painful that we ended up replacing it all with the one-liner that is sch_cake.

                                  occamsrazorO 1 Reply Last reply Reply Quote 0
                                  • occamsrazorO
                                    occamsrazor @dtaht
                                    last edited by

                                    @dtaht said in Playing with fq_codel in 2.4:

                                    you should not be able to achieve a higher rate than htb (hfsc?) specifies. There are a lot of ways to configure htb wrong (like not classifying all packets correctly), there have also been bugs in some versions.

                                    What is HTB? And my understanding is with fq_codel we are not using HFSC? I followed the video so I have the WANDown and WANup limiters under the limiters section, but when I click on "By Interface" > "WAN" I don't have anything enabled in that section, and nothing in the "By Queue" section....... should I?

                                    Post your code.

                                    I'm doing it all through the GUI. Is there a command to show the configuration easily?

                                    @kom said in Playing with fq_codel in 2.4:

                                    @occamsrazor ............know just enough to be dangerous.

                                    Same here :-)

                                    pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                                    Ubiquiti Unifi wired and wireless network, APC UPSs
                                    Mac OSX and IOS devices, QNAP NAS

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      dtaht
                                      last edited by

                                      What you folk are calling a limiter, I call a shaper. The two most common algorithms are token bucket and hfsc. google 'em. I have no idea which or an alternative are being used in the "limiter" concept here (?), nor do I have any idea how this gui is configured, I'm hoping others that are more familiar with bsd and pfsense can chime in. I'm just the co-founder of the bufferbloat project and care deeply seeing about seeing rfc8290 get deployed properly everywhere.

                                      I do think you need to enable things on the wan and queue sections but all I can point to at the moment is how to set up "sqm" properly on things like openwrt. Perhaps one of those tutorials would help in creating an analogy for this OS?

                                      https://openwrt.org/docs/guide-user/network/traffic-shaping/sqm

                                      1 Reply Last reply Reply Quote 1
                                      • G
                                        gsmornot
                                        last edited by gsmornot

                                        I'm trying this with a gigabit service and so far no matter what instructions I follow codelq performs better for me. With codelq I see an A each time on the dslreports test. With fq_codel I see a C.

                                        00001: 900.000 Mbit/s 0 ms burst 0
                                        q65537 50 sl. 0 flows (1 buckets) sched 1 weight 0 lmax 0 pri 0 droptail
                                        sched 1 type FQ_CODEL flags 0x0 0 buckets 0 active
                                        FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                                        Children flowsets: 1
                                        00002: 940.000 Mbit/s 0 ms burst 0
                                        q00002 50 sl. 0 flows (1 buckets) sched 2 weight 1 lmax 0 pri 0 AQM CoDel target 5ms interval 100ms ECN
                                        sched 2 type FQ_CODEL flags 0x0 0 buckets 0 active
                                        FQ_CODEL target 5ms interval 100ms quantum 1514 limit 10240 flows 1024 ECN
                                        Children flowsets: 2

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          Hugovsky
                                          last edited by Hugovsky

                                          Remember to flush firewall states between each test.

                                          EDIT: what is your hardware and what packages do you use?

                                          1 Reply Last reply Reply Quote 0
                                          • G
                                            gsmornot
                                            last edited by

                                            Hardware is SG-3100 and packages are Avahi, nut, openvpn client export, and pfblockerng. So, not a lot. Overall the network is great, the only time I see the score is testing. I'm just saying my score is better with codelq than fq-codel after following the video guide. I reset states between testing.

                                            D 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.