Traffic shaper changes [90% completed, please send money to complete bounty]

ccfiel

Hello ermal,

i got this error. :( think this is the load balancer error. any ideas?

Jul 11 01:52:21 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:146: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [146]: pass in quick on $lan route-to { ( xl0 192.168.3.1 ) } from 192.168.0.0/24 to /32 keep state label "USER_RULE: Make sure DMZ 2 traffic goes to WAN2 DMZ"
Jul 11 01:52:21 php: : There were error(s) loading the rules: /tmp/rules.debug:146: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [146]: pass in quick on $lan route-to { ( xl0 192.168.3.1 ) } from 192.168.0.0/24 to /32 keep state label "USER_RULE: Make sure DMZ 2 traffic goes to WAN2 DMZ"

chris

ccfiel

ermal, problem solve :) just change my ip /32 to /24

ccfiel

ermal,
load balance is now working :) and sticky connection option appears :) i am now testing your traffic shaper. My first problem is that the system can only see one interface. is this normal?

chris

Interface.jpg_thumb

Shapping1.jpg_thumb

Shapping2.jpg_thumb

ccfiel

ermal,
I tried to used by queue tab and clone shaper. is this good?

chris

eri--

Well i think the vx driver is not on the list of hardware interfaces that support ALTQ, the traffic shaper.

I searched a little bit and i cannot come to a conclusion can you please verify if it supports it or not?

Instructions to enter it on the list of supported ALTQ interfaces:
Go to Diagnostics->Edit File
load /etc/inc/interfaces.inc
search for "is_altq_capable" function
add it to the list there - after ,"ste" add the line ,"vx"
Save
Go to the traffic shaper and it should show the interfaces
Make a simple configuration and reload the rules.
If it does work report back so it get added to the list.

Ermal

ccfiel

you right ermal vx is not supported :(

php: : New alert found: There were error(s) loading the rules: pfctl: vx1: driver does not support altq The line in question reads [ vx1]:
Jul 12 00:21:49 php: : There were error(s) loading the rules: pfctl: vx1: driver does not support altq - The line in question reads [ vx1]:

so i need another new lan cards
chris

tomdchi

bug?

I have am trying to use the penalty box feature and added an alias to it during the wizard setup. It does not look like that it is working. The penalty box used to have its own que and I finaly noticed that it was added to the qotherslow. I am not seeing any traffic going through this que even though there are people using ip's associated with the alias.
Anything special I need to do?

Thanks,
Tom

eri--

Try to see if you are overridng the selection with a policy/rule on the interfaces tab.
Since the wizard creates a ruleset but you have to be careful when adding rules on the interfaces since they override every rule on the floating tab that does not have quick checked.

Read previous posts where i go in detail about this.
If you are doing this for optional interfaces too please check posts before cause you need to apply a fix for that
till the new update goes out after the move to FreeBSD 7 has settled.

Ermal

tomdchi

That was it! I missed the quick part in reading the posts.

Thanks!
Tom

JustinHoMi

Could the total bounties received be posted in the first post?

What will be required to get this included in pfsense 1.2.1?

dvserg

@JustinHoMi:

Could the total bounties received be posted in the first post?

What will be required to get this included in pfsense 1.2.1?

You can look 1.2.1 beta

JustinHoMi

Huh?

trendchiller

1.2.1 will be a version to fix up the bugs from 1.2 and introduce FreeBSD 7

No features will be added…

far182

I would love to contribute. Can I get a confirmation that there is an embedded version of the new shaper for people who contribute?

eri--

yes.

far182

This sounds great. Also, at some point will this make it into the public product? Or will this always be private?

eri--

You decide :P read before posting just showing respect for an endless thread going more endless.

This thread is the only documentation available about the new shaper and buring it with posts is not doing any good.

far182

I just sent $100 to paypal@chrisbuechler.com. Looking forward to the PM with instructions on where to get the new shaper. :)

I know it's a small token, but I will try to help and contribute more when I can. Personally, I would like to see this made available to everyone. This way it can be tested and improved faster. Personally, I will be testing this on my home Embedded router with 1.2 Release. My ultimate goal would be to set this up in our work production environment (many locations). I would prefer to wait until it's in a RELEASE version before putting it into production.

What kind of donation would be big enough to make this public and part of the RELEASE? Basically, very very very stable. I might be able find some contributors.

I have read through every thread on this post, but for testing I was hoping I might get some help with configuring for my test environment. Please let me know how it's recommended to configure the shaping using my setup. I have a ALIX3 with LAN, WAN, and WIFI. I have a 6mb/768Kb DSL. Right now I have the WIFI disabled as I was warned that shaping doesn't work with 3 interfaces. Right now (with 1.2 RELEASE) I have a nice shaping configuration for my LAN & WAN. Basically VOIP is put on highest priority. I have also put all HTTP/HTTPS traffic into another queue and made it low priority. Here is my config (attached):

P.S. I want to bridge my WIFI with my LAN.

Thank You!

TrafficShapeConfig.gif_thumb

TSQueues.gif_thumb

qVoipUP.gif_thumb

qVoipDOWN.gif_thumb

qOthersUpL.gif_thumb

qOthersDownL.gif_thumb