Openvpn traffic shaping
-
Hello, i am trying to shape traffic through an OpenVPN tunnel (the entire tunnel) but it seems that traffic is shaped in one direction (packets from pfsense to remote vpn server). Packets coming from the remote vpn server do not appear in any queue (actually they appear in the qLink queue of the LAN interface, but this is the part of the traffic that comes out of the tunnel and not the entire tunnel itself). The rules that I use is to match either the source (for inbound) or destination(for outbound) IP address of the remote openvpn server. The outbound rule works but I haveno luck with the inbound one.
The result is always the same no matter if I create all the queues by hand or if I use the built-in wizards.
The same problem was reported earlier in http://forum.pfsense.org/index.php/topic,13076.0.html but was not replied.Looking forward to hearing ideas…
-
In order to shape download traffic you need rules on the LAN interface, no matter if the traffic is coming from WAN, OpenVPN or whatever. In this case, you need a rule on your LAN tab with source: LAN subnet and destination: your OpenVPN subnet (not the server public IP), and specify what queue you want that traffic in (you previously saw the traffic on qLink because it is was catched by the default rule that sends traffic to qLink)