Share and Limit WAN Download in multi LAN environment

  • I want to limit my WAN download upto 800 Kbps.
    Problem is that I have multiple LAN (1 LAN and other DMZ).

    Using traffic shaping HFSC scheduler I am able to limit traffic for a given LAN interface.
    But the queues work independently on both interfaces.

    But how can I have a common queue with upper limit for both LAN interfaces.

  • You can't.

    Possible workarounds:

    • Bridge all LANs and apply the shaper to the bridge interface (you can still control traffic between interfaces, although they will technically be within the same subnet)
    • Use VLANs connected to the same physical interface, then apply the shaper to the physical interface
    • Use another pfSense box in transparent bridge mode, in front of the other one, to handle the shaping

  • Rebel Alliance Developer Netgate

    Use limiters, set a pair of limiters up (one for upload, one for download) with the speed you want for both LANs
    Then use those limiters in all traffic for both LANs.

Log in to reply