Limiters



  • I recently enabled limiters on my Pfsense 2.0 and then it start to get this message on console: BUMP SCHED BUCKETS TO 64(WAS 0)

    Can Anyone tell me What is it? is this Ok? what does it mean?

    Thanks



  • search the forum, its been answered before. But if i remember, its nothing to worry about.



  • thanks I already found the answer..
    Now Im monitoring my limiters, with limitersInfo, but I dont know if it is working well or not.. Can anyone help me with the limiters info, please?
    thanks!!
    Limiters:
    1- 100 Kb:download
    2. 64 kb: upload

    this is the print-out of my Limiter Info:

    00003: 100.000 Kbit/s    0 ms burst 0
    q131075  50 sl. 0 flows (1 buckets) sched 65539 weight 0 lmax 0 pri 0 droptail
    sched 65539 type FIFO flags 0x1 64 buckets 1 active
        mask:  0x00 0x00000000/0x0000 -> 0xffffffff/0x0000
    BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
    32 ip          0.0.0.0/0                  192.168.1.112/0    2141  3083242 14 21000  13

    00004:  64.000 Kbit/s    0 ms burst 0
    q131076  50 sl. 0 flows (1 buckets) sched 65540 weight 0 lmax 0 pri 0 droptail
    sched 65540 type FIFO flags 0x1 64 buckets 1 active
        mask:  0x00 0xffffffff/0x0000 -> 0x00000000/0x0000
    BKT Prot Source IP/port_ Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
    72 ip    192.168.1.112/0                  0.0.0.0/0              11      660  0    0  0



  • Never really looked at the limiter info status page. I ran some speed test to verify that it was working correctly for me. like http://www.speedtest.net. You could use a mini version of their software and run it locally, http://speedtest.net/mini.php



  • thanks Ill try that.
    Now I have some doubts.. If I limit a host on my LAN, I need to consider the bandwidth of my WAN? or which bandwidth?
    This could be the scenario:
    I have 3 MB bandwidth in my WAN connection, and I want to limit a host to use only 100k of that 3Mb, for upload and download.
    Should I limit on the WAN interface or LAN interface?

    thanks for your help!!



  • I would limit lan, if you have no bridged interfaces



  • I haven't fully tested pfSense 2.0, but in my knowledge, by limiting LAN you are controlling the data flux the user from LAN do to WAN since the connections between LAN users are made by the switch it self. At my place i have applied the limiters to LAN and it's working fine to limit the internet access to the WAN by LAN users.



  • thanks..
    But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
    That might work better?

    "You can make a WAN rule with a destination of the LAN IP involved (NAT happens before the rules are processed) or you could put a rule on the floating tab, on lan, in the 'out' direction."
    http://forum.pfsense.org/index.php?topic=34311.0



  • @demian:

    But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
    That might work better?

    How many clients you want to limit? only one or all of 'em?



  • some of them.. between 5 and 10 hosts..
    I think if it works fine with 1 host it`d work with "N" hosts?

    thanks for your help again!



  • You can create alias, fill that with limitable ip's and put that alias in your limiter rules



  • yes I know that, but my "main" doubt is in which interface do I have to put my rules…upload on LAN and Download on WAN? or both in LAN?

    thanks!



  • rules work always on ingress.

    upload -> lan
    download -> wan

    You can also test how those work, if you put both rules on lan and none to wan



  • ok
    I will test both on LAN, many forum users says that this works, but I still believe that it'd be better: upload on LAN and Download on WAN..

    thanks

    after my test I will post again the results I get


Locked