Some hosts ignore limiters (seldom issue)



  • Hi,
    I have very simple configuration for office. pfsense 2.2.6 (VM on Hyper-V 2012).
    There is LAN with Limiters (Upload and Download) and WAN.
    One rule is with limiters of 4 mbit/s (fast ports: 80, 443)
    Another rule limits all other ports to 256 kbit/s (defense against torrent and etc.)

    Everything works ok.

    But i had two issues during last month with the same scenario.

    One laptop decided to update to windows 10 and start to download updates. It was limited at 4 mbit.
    After hour i discovered that it eats whole bandwidth (8 mbit/s).
    It seems like it goes passing over limiters.
    Reset states/change limiter speed helps. Limiter works again for this laptop.
    But after hour or two it was repeated.
    Then laptop is gone and i can't reproduce issue.

    Is it bug, or some incorrect setup?
    Or this is due to setup of pfsense like VM? (some timing issues?).
    I have 3 VM and 2 HW setups. No problems at all, except desribed earlier issue.

    What can I extract from logs if this will happen again in order to solve/diagnose problem?



  • If you laptop was conencted via wifi, Window may have been load balancing LAN and WIFI, which if they had separate IP addresses, would get different buckets. Just a random thought.



  • @Harvy66:

    If you laptop was conencted via wifi, Window may have been load balancing LAN and WIFI, which if they had separate IP addresses, would get different buckets. Just a random thought.

    thanx, but limiter has 4 MBit for all pcs, not per single host. and in 99% of time it's working.

    and i'm sure that connection was only via wifi, there no physical opportunity to be simultaneously in lan and wifi.
    i found another thread in this forum with problem on vmware and shaping. May be it's similar issue.

    probably this is due to virtualization on hyper-v 2012 (not R2) and some unusual internal methods of getting w10 image from w8 side. May be a lot of active connections on 80 ports from single host.

    another problem is that i can't reproduce it at all, but it was twice.


Log in to reply