Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Amazon AWS Backup Shaping to lower priority queue [Resolved]

    Scheduled Pinned Locked Moved Traffic Shaping
    5 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      davidmoore
      last edited by

      I have created an Alias specifying ALL of Amazon's IP ranges. I then created a floating rule specifying that alias and 443 as the destination. I selected qACK/qOtherLow to be the queues for this rule. All other 443 traffic should be qOtherHigh per a default wizard rule. As I'm performing my backup and I look at my Status>Queues page, I see qOtherHigh with utilization, but I don't see qOtherLow with utilization. I've confirmed that my floating rule exists at the top of the list, as I'm assuming order of operation matters. Also, when I view the rule, I show states are being matched to it. I'm confused as to why pfSense isn't queueing my backup traffic correctly. Is this possibly a bug? What other information can I provide for troubleshooting?

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        For floating rules last match wins (the Quick option is unchecked), so putting your rule at the top may be part of the problem.  Also, you need to clear states before the change takes effect.

        1 Reply Last reply Reply Quote 0
        • D
          davidmoore
          last edited by

          @KOM:

          For floating rules last match wins (the Quick option is unchecked), so putting your rule at the top may be part of the problem.  Also, you need to clear states before the change takes effect.

          Okay, so I read more about this and floating rules still do topdown processing, but it will choose the last rule that matches in the list unless Quick is selected. If Quick is enabled then it will stop processing that packet and go ahead and make the match.

          I have quick enabled on that rule and it's at the top of the list.

          1 Reply Last reply Reply Quote 0
          • N
            Nullity
            last edited by

            @davidmoore:

            @KOM:

            For floating rules last match wins (the Quick option is unchecked), so putting your rule at the top may be part of the problem.  Also, you need to clear states before the change takes effect.

            Okay, so I read more about this and floating rules still do topdown processing, but it will choose the last rule that matches in the list unless Quick is selected. If Quick is enabled then it will stop processing that packet and go ahead and make the match.

            I have quick enabled on that rule and it's at the top of the list.

            According to https://doc.pfsense.org/index.php/What_are_Floating_Rules (at the bottom of the page):

            "Rules using the Queue action do not work with quick checked."

            Please correct any obvious misinformation in my posts.
            -Not a professional; an arrogant ignoramous.

            1 Reply Last reply Reply Quote 0
            • D
              davidmoore
              last edited by

              @Nullity:

              @davidmoore:

              @KOM:

              For floating rules last match wins (the Quick option is unchecked), so putting your rule at the top may be part of the problem.  Also, you need to clear states before the change takes effect.

              Okay, so I read more about this and floating rules still do topdown processing, but it will choose the last rule that matches in the list unless Quick is selected. If Quick is enabled then it will stop processing that packet and go ahead and make the match.

              I have quick enabled on that rule and it's at the top of the list.

              According to https://doc.pfsense.org/index.php/What_are_Floating_Rules (at the bottom of the page):

              "Rules using the Queue action do not work with quick checked."

              Thanks. I think this issue is resolved.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.