Traffic shape with Vlans and 100mb fibre
I have 7 vlans all setup correctly.
All is good but I want to limit per host to 20mb and then HFSC traffic shape that 20mb per host.
My thinking is each user will have a maximum of 20mb of the 100mb and then prioritize that 20mb.
So for example if 1 user downloads a file over the web while ssh is active, the ssh should be prioritized.
We have about 50 staff but not all will be utilizing the 100mb fibre at the same time.
Is this easy to implement?
PFSense has two types of shaping, interface shapers like HFSC and limiters. HFSC can shape the egress of an interface. In other words, you can shape the data leaving your WAN and you can shape the data leaving each of your VLAN interfaces, but you cannot have your interfaces share state. Each interface does not know anything about the shaping of another interface.
Some people claim there are some round-about ways to effectively share bandwidth across several interfaces, but at least for easy setups, you'll need to forget sharing bandwidth and instead just carve out dedicated bandwidth.