Squid and Traffic Shaping
I am having some problems when traffic shaping using squid; I first thought it was a problem with captive portal speed limiting however this turned out not to be the case (see http://forum.pfsense.org/index.php/topic,39371.0.html).
When I have a ‘vanilla’ install (just running captive portal and all my WAN/LAN settings, no packages installed) the shaper works as expected, limiting users speeds but not causing dropouts. However, when squid is installed using default settings browsing problems occur. Downloads stop, streaming no longer runs and so on.
Packet captures on the WAN interface have revealed that when I am using squid I frequently get TCP zero window packets; these are NOT present before squid is installed.
I am by no means an expert with squid, bsd or pf, in fact still very much a beginner, so would appreciate any insights into this issue.