A queue used for varios IPs = PROBLEM

EduFrazao

Hi all!
I want to use pfSense in a Wireless Internet Provider, to control bandwidth and DHCP for all clientes ( about 300 )…

We have 8mbps of total bandwidth down, and 1mbps UP..

Some clients, have 256kbps of bandwidth, others 512, others 768.

I Want to create this three queues ( 256, 512, 768 kbps ), and create firewall aliases, 256, 512, and 768, and put the ips of each client in this groups. Latter, in the shapping rules, create a rule for Upload and Download, to each group...

Well... At this moment, i reach to do that... The problem is: If I have 4 clients in the 256kbps group, and this 4 clients make a download, the bandwidth of the queue is splited for this 4 clients... I Want that each client, have 256kbps, not the clients share the bandwidth of the queue...

How can I do that? Can I create a queue, that can be used for various clients, allowing the named bandwidth for each client without share himself?

Sorry by bad english...

eri--

Actually only really possible in 1.3!
In 1.2 you can accomplish that but only if your intimate with the shaping.

EduFrazao

Im tryng to use it on 1.3 too, but, when I choose the IN/OUT limiter ( Inserted In Firewall / Traffic Shapping / Limiter ), the traffic stop…

I can conect on a WebServer in example, BUT, nothing returns... If i
n the same rule, I change the In/Out limiter to NONE, all works...

Can you help me to make a correct limiter?

Thanks!

eri--

Simple enough you need to 2 limiters 1 for in and one for out.
Create one with src-mask and the other with dst-mask

For in choose limiter with src-mask and out the one with dst-mask
That should do it.
If it does not post screenshots, config.xml and /tmp/rules.debug here for review.

I assume the rule that you set in and out is in one of your lans.

EduFrazao

The problem continues…

Ive Posted some ScreenShots, Config, and Debug files, as solicited...

This is the Limiter IN

This is the Limiter OUT

Firewall LanRules

Firewall Default Lan Rule ( Was This Rule that Ive changed to use the Limiter IN/OUT)

This is a Download with Limiters Turned ON in the firewall rule…
Note that connection was maded, but the return can reach the destination ( at least I think that )

And NOW, a Download if I remove the limiters from the rule:

HERE is my /tmp/rules.debug:
http://pastebin.com/f274b1ab

And, here is my config.xml ( /cf/conf/config.xml )
http://pastebin.com/f3b36e187

Please… If anyone can Helpme...

EduFrazao

Only for information: This is the version Alpha that Im using: pfSense-20081024-1237.iso

Thanks a lot

EduFrazao

Another thing that ive noted is:

When the LIMITERS is ON on the firewall rule, any tcp connection that I make, open two conections on PfTOP..

One, with State in 4:4 and other in State 4:2

If I try in example, to conect on a smtp server, via telnet, I reach.. But any data is received ( even the Wellcome message of the SMTP Server ).

When I remove the Limiters from the rule, I reach to connect in the same SMTP Server, and operate with him normally..

IN PFTOP, appears two conections too, but both in State 4:4

I Dont know what this states can tell, everyway, im here posting :)…

EduFrazao

Other Information: In a ping test, with 100 packs..

ALWAYS occour 92% of loose… Always.. The same loose count...

The packet loss of the queue is 0... Ive config it to 1, to test, but Ive got the same result...

Please... Anyone can Helpme?

eri--

Can you try one of the latest snapshots the limiter should behave correctly now since i fixed the issues.
Please give me a confirmation on this.

EduFrazao

Oh… Thank you so mutch Ermal... I will test it now!!!

And, came back to do a feedback!

Thanks again!!!

EduFrazao

OH.. Its seens to be working now…

I will do more tests with more complex filter rules and aliases...

For success or not, i will reply here ok???

IMENSE thanks!!!

eri--

Can i have some feedback from this?