Limiter LAN and WAN different

[matrox.gr]

Hi.
I have a problem some time now and can't find a proper solution.

I have an WAN 200/200 (Download/Upload).
I have set up Limiter 100/100 (Download/Upload) and applied it to my LAN on a Aliases internal LAN IP group. All is working ok, speed test shows correct results.

The problems start when a client starts ASPERA connect and starts downloading. Sometimes (not all the times) although the LAN traffic graph shows 100Mbit Download the WAN graph peaks at 200 Mbit Download and bottlenecks all internet traffic on the network.

LAN traffic shows the limiter is working:

But WAN is 100% utilized:

This is my upload limiter:

And download limiter:

And the limiters on the LAN rule:

I have tried putting the limiters on Floating rules but the same thing happens.

Any thoughts?

pfsense 2.4.4

[robnitro]

I use 2 floating rules at the bottom on LAN to put a group into a slower speed and it works for me with alias LIMITED to represent the limited ip's. My non limited clients use another limiter set to my normal up/down speeds in similar manner as the limited ones, to give fq_codel for them too.

One LAN out rule Destination LIMITED with In /Out of 100down/ 100up

One LAN in rule Source LIMITED with In/Out of 100up/100down

Keep in mind that LAN out is Download and LAN in is upload, so you see the pipes are different. Also LAN in uses a source address, LAN out uses a destination address.

[matrox.gr]

OK I will try that although I think it's got something to do with Aspera Connect software bottlenecking my WAN.