Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help lan to dmz is shaping like lan to wan :(

    Scheduled Pinned Locked Moved Traffic Shaping
    8 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      marian78
      last edited by

      hi, i have wan, lan, wifi, dmz interfaces. Setup pfSense Traffic Shaper with wizard. My WAN down speed is 15Mbps and up 2Mbps. This values i set for WAN. But now, speed between LAN/WIFI and DMZ is limited to this speeds. Without shaper i get full link speed between LAN and DMZ or WIFI and DMZ. In DMZ i have multimedia file server, and if i stream full hd video, with high bit rate, to LAN/WIFI, it is shaped to "wan" speed.

      Is there some tricks, that shaping only work for communication over WAN?

      pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

      1 Reply Last reply Reply Quote 0
      • N
        Nullity
        last edited by

        Between LAN & DMZ? What does that mean?

        Share your network topology and any other relavent details.

        Please correct any obvious misinformation in my posts.
        -Not a professional; an arrogant ignoramous.

        1 Reply Last reply Reply Quote 0
        • M
          marian78
          last edited by

          hi,
          speed from lan, wifi, dmz to wan is set in wizard to 15/2 Mbps. But, this same speed is also between LAN, wifi and dmz. This is what i dont want. I want speed between local network at full maximum speed, not sphaped speed of WAN. Because, when stream 4k video from DMZ to LAN, bitrate about 15Mbps is very small.
          I need shaped speed only to internet (to WAN), not between local networks.

          topologia.PNG
          topologia.PNG_thumb

          pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

          1 Reply Last reply Reply Quote 0
          • N
            Nullity
            last edited by

            Understood.

            There's a few ways to solve the problem. I dunno what the "proper" method is… I think you need to assign all LAN (WIFI, DMZ, etc) traffic to the qINTERNET queue.

            Please correct any obvious misinformation in my posts.
            -Not a professional; an arrogant ignoramous.

            1 Reply Last reply Reply Quote 0
            • H
              Harvy66
              last edited by

              It's shaping because it's matching your rules. You should create a rule that assigns local to local traffic to your "link" queue.

              1 Reply Last reply Reply Quote 0
              • N
                Nullity
                last edited by

                Ah, yeah. My mistake. Assign to the qLink queue.

                Isn't the wizard supposed to do that automatically?

                It might be easiest to create an Alias that includes all of your local networks, then use that in the appropriate firewall rule.

                Please correct any obvious misinformation in my posts.
                -Not a professional; an arrogant ignoramous.

                1 Reply Last reply Reply Quote 0
                • M
                  marian78
                  last edited by

                  thx for answers.

                  can you please explain more specific, i am new to shaping (lesson for dummy). I created alias, with subnets of all my local networks (192.168.1.0/24, 192.168.10/24, 192.168.20.0/24). Now i search, where to setup this alias.

                  EDIT: looked to floating firewall rules and there is no rule with qLink. Is it missing?
                  EDIT2: add screenshot

                  local.PNG_thumb
                  local.PNG
                  qlink.PNG_thumb
                  qlink.PNG
                  dmztowifi_noshaper.PNG
                  dmztowifi_noshaper.PNG_thumb

                  pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

                  1 Reply Last reply Reply Quote 0
                  • M
                    marian78
                    last edited by

                    I little study and did this.
                    1. setup shaper with wizard
                    2. edit Traffic Shaper/By Interface. Click on LAn/DMZ/Wifi and edit Bandwidth (LAN,DMZ to 1Gbps, Wifi to 150Mbps)
                    3. edit LAN/DMZ/Wifi qLink. Click on LAN/DMZ/Wifi qLink and edit Bandwidth (LAN,DMZ to 1Gbps - 15Mbps = 985Mbps, Wifi to 150Mbps - 15Mbps = 135Mbps). 15Mbps is my internet download speed
                    4. apply settings,  reload firewall rules.

                    I dont know if it is ok, because i dont know what set to "Queue limit in packets" in qLink.

                    lan_dmz_qlink_edited.PNG
                    lan_dmz_qlink_edited.PNG_thumb
                    wifi_qlink_edited.PNG
                    wifi_qlink_edited.PNG_thumb
                    lan_dmz_edited.PNG
                    lan_dmz_edited.PNG_thumb
                    wifi_edited.PNG
                    wifi_edited.PNG_thumb
                    wifi_qinternet_not_need_edit.PNG
                    wifi_qinternet_not_need_edit.PNG_thumb

                    pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.