Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traffic Shaping limit ftp

    Scheduled Pinned Locked Moved Traffic Shaping
    10 Posts 3 Posters 4.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jigpe
      last edited by

      Good afternoon. How to limit the download / upload if the user will use ftp/ssh cli ft?
      Thanks

      jigp
      Davao City

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        In exactly the same way as the other thread you started.  The fact that you're now talking about SSH instead of HTTP doesn't change the basics, just the ports you specify.

        1 Reply Last reply Reply Quote 0
        • J
          jigpe
          last edited by

          I see. its still the same in http? Some users used a ssh. They do ftp inside of ssh..The thread still no work. Still the download is fast using ftp/ssh-ftp/http :( any idea? i set 1% in traffic shaper

          jigp
          Davao City

          1 Reply Last reply Reply Quote 0
          • Cry HavokC
            Cry Havok
            last edited by

            If people are using a tunnel (whether that's SSH, OpenVPN, IPsec, whatever) then all you can do is shape the tunnel.  You can't shape the individual protocols inside the tunnel since you can't detect them.

            1 Reply Last reply Reply Quote 0
            • J
              jigpe
              last edited by

              | If people are using a tunnel (whether that's SSH, OpenVPN, IPsec, whatever) then all you can do is shape the tunnel.
              How to shapre the tunnel Sir? thanks

              jigp
              Davao City |

              1 Reply Last reply Reply Quote 0
              • Cry HavokC
                Cry Havok
                last edited by

                By shaping the protocol being used for the tunnel.  If they are using SSH over port 22/TCP then you would shape 22/TCP.  Note that this would impact all other users of SSH over 22/TCP.

                1 Reply Last reply Reply Quote 0
                • J
                  jigpe
                  last edited by

                  Hello good evening. Thanks for the quick reply. I did it there but still the download is fast . Ive tried lftp over ssh, still the same very fast. I set it to 1% still not working..I even restarted the pfsense after i reset the static states table in the system..  :( im using 1.2.2.. Shh and ftp inside the ssh is very evil :( Thanks in advance.

                  jigp
                  Davao City

                  1 Reply Last reply Reply Quote 0
                  • J
                    jigpe
                    last edited by

                    still no luck..

                    jigp
                    Davao City

                    1 Reply Last reply Reply Quote 0
                    • A
                      arcanemagus
                      last edited by

                      Are you setting this "limit" in the upperlimit m2 field of the queue that traffic passes through? If you are just setting the bandwidth/realtime/linkshare values then this will not impose a hard limit, instead it will only reserve 1% of the traffic, but if there is no other traffic then this "limited" traffic will jump to using 100% of the available bandwith until other traffic needs it.

                      Another thing to check is that another rule is not catching the traffic before it gets to your limit rule. For example I had a rule setup to limit some users to 20 KB/s but their HTTP traffic (downloads) were getting caught by the generic HTTP traffic rule, I had to put the rule that limits all their traffic above the generic HTTP rule before the penalty rule had any effect.

                      1 Reply Last reply Reply Quote 0
                      • J
                        jigpe
                        last edited by

                        Good morning :)

                        Yeah i set 1% i even put it a blank no luck :(

                        jigp
                        Davao City

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.