Traffic shaping for certain external IP's

[nils92]

Hi all,

Just to start off I've no previous experience with traffic shaping in pfsense however I'm wondering if I can do the following.

My firewall has an alias with a bunch of IP's for my IPTV provider I would like to prioritise these IP's over any other traffic e.g. if someone is watching tv and I start a massive download I do not want to cripple the connection and let's say have minimum of 3MBp's downstream for these IP's reserved. On the other hand I do not want to throttle the connection if no one is actually watching tv.

Is that possible with the "Traffic shaping" option?

[moscato359]

This is absolutely doable.

Hfsc, or priq can do this easily

Setup a priq default queue, and a second queue. Use a firewall rule to put relevant traffic to alias to higher priority second queue

[nils92]

Thanks for the reply, so far I can't seem to get it to work but they might be related to the fact that I run everything through a VPN which I can't seem to traffic shape on.

[Codenix]

@nils92:

…but they might be related to the fact that I run everything through a VPN which I can't seem to traffic shape on.

If you're tunnelling through the PFSense with a VPN connection, as far as the PFSense is concerned all the packets passing through the VPN are destined to the VPN server (assuming an outbound connection), not whatever they go to once they pop out the other end of the VPN. So you're correct - you can't shape traffic within a VPN.