Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Limit bandwidth per IP and have a global bandwidth pool.

    Traffic Shaping
    2
    2
    238
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Aus_Karlos
      last edited by

      Hey guys im trying to figure out traffic shaping. I've created a few rules for a public site to limit the bandwidth per IP.
      For simplicity I'll stick with the Upload side (Client download).
      I created a Limiter called Public_Site_Out with a limit of 2mbit/s setup the queue manager and scheduler. Created a new Queue and set the mask to Destination Addresses 32, 128.
      I applied the traffic shaper to a WAN rule that passes the 443 port to the server thats hosting the site. And it works. A client will download at ~2100kbps if they download another file at the same time it spits the bandwidth and if a new client downloads with a different IP they also get ~2100kbps.

      Great. Now Im trying to figure out how can I apply a global Bandwidth limit of 18mbit/s (~190mbps) over the connection to the server. So that if lots of clients connect they don't end up eating a huge chunk of the total available bandwidth that other services need.

      I tried a floating rule but it doesn't intercept any packets.
      The public servers traffic comes from and goes out a framed Route IP on the WAN port if that helps.

      F 1 Reply Last reply Reply Quote 0
      • F
        ferrousmetal @Aus_Karlos
        last edited by

        @Aus_Karlos

        You can also try to modify your existing WAN rule:
        Go to Firewall > Rules > WAN.
        Edit the rule that currently handles the traffic for port 443 to your server.
        In the Advanced Options section, set the "In/Out pipe" for outgoing traffic to use the Global_Limit_Out limiter.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.