Different between floating rules and lan rules?



  • Once we setup TS on pfsense(2.1.3), the wizard create some floating rules.

    Now, we have the option in the firewall->rules->LAN, to create our rule and specify if we want to use Ackqueue/Queue.

    What difference we have if setup here or with floating rules?

    Last thing, in the firewall rules, we have:

    Ackqueue/Queue

    What is the meaning of those fields?

    Thanks.


  • Rebel Alliance Developer Netgate

    Floating rules have many more options which are hidden from the rules on the individual interface tabs.

    One of these is the shaper wizard's default of "match" rules, which do not pass or block traffic, but only classify it for the purposes of traffic shaping. The floating rules can also match traffic in the outbound direction, which is necessary for proper/expected shaping. Interface tab rules only match inbound traffic.

    Ackqueue/Queue are there to pick the shaper queues. Queue is for the arriving packets, Ackqueue is for reply/ACK packets



  • @jimp:

    Floating rules have many more options which are hidden from the rules on the individual interface tabs.

    One of these is the shaper wizard's default of "match" rules, which do not pass or block traffic, but only classify it for the purposes of traffic shaping. The floating rules can also match traffic in the outbound direction, which is necessary for proper/expected shaping. Interface tab rules only match inbound traffic.

    Ackqueue/Queue are there to pick the shaper queues. Queue is for the arriving packets, Ackqueue is for reply/ACK packets

    Thank you for a very clear answer that helped me solve some traffic shaping issues