CoDel/FQ_CODEL FW Rule
-
I followed the instructions in the slides from the August 2018 hangout to configure the CoDel/FQ_CODEL limiter, and it works, but shouldnt the firewall floating rule be "match" instead of "pass"?
https://www.slideshare.net/NetgateUSA/pfsense-244-short-topic-miscellany-pfsense-hangout-august-2018
-
Yes, I understood it should be set to Match not Pass. Thats how I've been operating for a couple years. And, from past posts, I understood the bandwidth should be set about 5% below provider capacity, not "equal to" capacity. And both parent and child QMA should be set to Tail Drop not Codel. Is Tail Drop no longer the preferred setting as other users have tested?
Notice this video was done two years ago. I'm only revisiting this because when one client has a large download others are not getting a fair share of available bandwidth, not balancing well. And, as I recall, load balancing by IP is no longer supported, is this still the case?
Any comments appreciated.
-
I found some interesting notes by the Dummynet AQM developer including a recommended configuration for FQ_CODEL here. Still old though and an update on what works best would be nice. https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4/775