Enabling Shaping = extremely slow interface



  • Hi All,

    I'm a big newbie here. So I'd really appreciate your help.

    I have my pfsense install (on ESXi) with 2 ethernet ports.
    1 LAN, 1 WAN.

    My need is:
    1. Prioritise email traffic (particularly for outbound)
    2. Medium HTTP traffic priority
    3. All P2P blocked or extremely low bandwidth
    4. Youtube videos and other video/music streaming with extremely low priority

    Reason is I have 2Mbps down and 0.5 Mbps up to work with.

    I followed this tutorial:
    http://hubpages.com/hub/How-to-Configure-Deep-Packet-Inspection-Using-pfSense

    However after completing it (Friday evening), on Monday morning I was using 400-600kbps (instead of my 2Mbps max) AND when I was pinging the router LAN interface I was getting lots of high pings (500, 800ms) and even several timeouts.
    I figured maybe a physical issue or problem with the ESXi, however checking all of the above I found nothing odd.

    Upon disabling the traffic shaper, the situation resolved itself immediately. My pings are 1ms to the router with no timeouts at all.

    Can anyone maybe enlighten me as to what I may have done wrong? Much appreciated.

    Small aside, I installed Darkstat however on the host page it does not show any computer hostname. Anything I can do so I can resolve the IP/MAC to hostnames since hosts are leased by DHCP.

    Cheers



  • Bear in mind that L7 filtering puts a heavy load on you CPU… What hardware are you running on? You might be short on CPU power



  • @georgeman:

    Bear in mind that L7 filtering puts a heavy load on you CPU… What hardware are you running on? You might be short on CPU power

    Hi, thanks for your reply.
    I'm running a Quad Core Xeon. Pretty sure the CPU usage never peaks really.