Shaping between 2 ADSL connections



  • Hi.
    Can I use pfSense to make a traffic shaping for the outgoing traffic from LAN to Internet using 2 different ADSL connections (one on a eth interface and one on another eth interface)?
    Can I make some rules to decide the % value for divide the outgoing traffic?
    For example, I wish to have 50% of the total traffic delivered to one ADSL link, and the other 50% to the other ADSL link, or to use the second ADSL link only when the first reaches 100% of bandwith busy.

    Could pfSense help me?

    Thank you very much and goodbye.
    Decibel.



  • No, unfortunately it only supports one wan connection at this time.  We are looking at ways to change this in the future.



  • You can fake that by using modemrouters as pseudo static gateways in front of your wans. if you enter the pfsense wans as dmz ips at the routers you should be able to do everything except dyndns.



  • @hoba:

    You can fake that by using modemrouters as pseudo static gateways in front of your wans. if you enter the pfsense wans as dmz ips at the routers you should be able to do everything except dyndns.

    Could you explain me this, please? This should be interesting…



  • DSL1–--PPPoE/modemrouter1/192.168.10.1----static WAN1
                                                                                  pfSense/LAN--------------Clients
    DSL2----PPPoE/modemrouter2/192.168.20.1----static WAN2

    modemrouter1 and 2 do plain NAT, just like if clients are connected to them
    at modemrouter1 enter the WAN IP of pfSense WAN1 as DMZ
    at modemrouter2 enter the WAN IP of pfSense WAN2 as DMZ

    Now you can create a gateway pool with gateways 192.168.10.1 and 192.168.10.2 and change the desired firewall rules to use the pool instead of the default gateway at wan1.
    This will give you a 50/50 loadsharing if you do it this way. only thing you can't do with this setup is using pfsense's dyndns as the pfsense doesn't see the real wan ip anymore but your modemrouters could do this if they have this feature and you need it. IPSEC might become a bit more tricky too but should still work if configured correctly but I guess your PPPoE is dynamic anyway.



  • Thank you! I will try…
    May I write you again if I will have any problem?

    Thank you very much and goodbye!
    Decibel.



  • Sure, that's what this forum is meant for  ;D


Locked