Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Limiters

    Scheduled Pinned Locked Moved Traffic Shaping
    14 Posts 4 Posters 7.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      demian
      last edited by

      I recently enabled limiters on my Pfsense 2.0 and then it start to get this message on console: BUMP SCHED BUCKETS TO 64(WAS 0)

      Can Anyone tell me What is it? is this Ok? what does it mean?

      Thanks

      1 Reply Last reply Reply Quote 0
      • C
        Cino
        last edited by

        search the forum, its been answered before. But if i remember, its nothing to worry about.

        1 Reply Last reply Reply Quote 0
        • D
          demian
          last edited by

          thanks I already found the answer..
          Now Im monitoring my limiters, with limitersInfo, but I dont know if it is working well or not.. Can anyone help me with the limiters info, please?
          thanks!!
          Limiters:
          1- 100 Kb:download
          2. 64 kb: upload

          this is the print-out of my Limiter Info:

          00003: 100.000 Kbit/s    0 ms burst 0
          q131075  50 sl. 0 flows (1 buckets) sched 65539 weight 0 lmax 0 pri 0 droptail
          sched 65539 type FIFO flags 0x1 64 buckets 1 active
              mask:  0x00 0x00000000/0x0000 -> 0xffffffff/0x0000
          BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
          32 ip          0.0.0.0/0                  192.168.1.112/0    2141  3083242 14 21000  13

          00004:  64.000 Kbit/s    0 ms burst 0
          q131076  50 sl. 0 flows (1 buckets) sched 65540 weight 0 lmax 0 pri 0 droptail
          sched 65540 type FIFO flags 0x1 64 buckets 1 active
              mask:  0x00 0xffffffff/0x0000 -> 0x00000000/0x0000
          BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
          72 ip    192.168.1.112/0                  0.0.0.0/0              11      660  0    0  0

          1 Reply Last reply Reply Quote 0
          • C
            Cino
            last edited by

            Never really looked at the limiter info status page. I ran some speed test to verify that it was working correctly for me. like http://www.speedtest.net. You could use a mini version of their software and run it locally, http://speedtest.net/mini.php

            1 Reply Last reply Reply Quote 0
            • D
              demian
              last edited by

              thanks Ill try that.
              Now I have some doubts.. If I limit a host on my LAN, I need to consider the bandwidth of my WAN? or which bandwidth?
              This could be the scenario:
              I have 3 MB bandwidth in my WAN connection, and I want to limit a host to use only 100k of that 3Mb, for upload and download.
              Should I limit on the WAN interface or LAN interface?

              thanks for your help!!

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                I would limit lan, if you have no bridged interfaces

                1 Reply Last reply Reply Quote 0
                • T
                  Tomax
                  last edited by

                  I haven't fully tested pfSense 2.0, but in my knowledge, by limiting LAN you are controlling the data flux the user from LAN do to WAN since the connections between LAN users are made by the switch it self. At my place i have applied the limiters to LAN and it's working fine to limit the internet access to the WAN by LAN users.

                  1 Reply Last reply Reply Quote 0
                  • D
                    demian
                    last edited by

                    thanks..
                    But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
                    That might work better?

                    "You can make a WAN rule with a destination of the LAN IP involved (NAT happens before the rules are processed) or you could put a rule on the floating tab, on lan, in the 'out' direction."
                    http://forum.pfsense.org/index.php?topic=34311.0

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by

                      @demian:

                      But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
                      That might work better?

                      How many clients you want to limit? only one or all of 'em?

                      1 Reply Last reply Reply Quote 0
                      • D
                        demian
                        last edited by

                        some of them.. between 5 and 10 hosts..
                        I think if it works fine with 1 host it`d work with "N" hosts?

                        thanks for your help again!

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by

                          You can create alias, fill that with limitable ip's and put that alias in your limiter rules

                          1 Reply Last reply Reply Quote 0
                          • D
                            demian
                            last edited by

                            yes I know that, but my "main" doubt is in which interface do I have to put my rules…upload on LAN and Download on WAN? or both in LAN?

                            thanks!

                            1 Reply Last reply Reply Quote 0
                            • M
                              Metu69salemi
                              last edited by

                              rules work always on ingress.

                              upload -> lan
                              download -> wan

                              You can also test how those work, if you put both rules on lan and none to wan

                              1 Reply Last reply Reply Quote 0
                              • D
                                demian
                                last edited by

                                ok
                                I will test both on LAN, many forum users says that this works, but I still believe that it'd be better: upload on LAN and Download on WAN..

                                thanks

                                after my test I will post again the results I get

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.