pfSense Traffic Shaping and Quality of Service (QoS) - Chris Titus Tech
video description
Date: 2022-03-20
Related videos
Comments and reviews: 10
Steve
I like Untangle NG . PFsense is highly customizable and a great tool but I am fine managing my routers with DD-WRT the QoS management is pretty simple. AND I really do not like BSD for anything, just not a fan. For more complex network configs and remote settings I really like Untangle. My home network is a series of nodes and the main one is untangle, that said I still make the web GUI accessible on each router to tweak individual configs. I chose Untangle because , 95% of what I do is in a terminal and it runs Debian. If I have to use a GUI Untangle's GUI is really nice and friendly + extremely resourceful. I like how they have a mini desktop in the Web Management interface , I can just pop open a terminal and make moves in Debian. One of the benefits of running a Untangle is installing to and actual PC and not a SoC. I can get anything done that I could from my daily driver from the Debian terminal. You can do the same with PFsense but this is only my opinion. Some years back I was testing it out, and also tried FreeNAS but the BSD factor was killing me and at that point I didn't know a lot about BSD. For instance I didn't know I could change the shell to bash , maybe I would have formed a different opinion if I had knew that then ( years ago). Can you do an OpenVPN Server/Client install/tutorial and config , show how to get to your network remotely with shared .ovpn key with client app for Windows and Linux. Every time I set this up I always mess something up, I'm just trying to figure out where I go wrong.
reply
I like Untangle NG . PFsense is highly customizable and a great tool but I am fine managing my routers with DD-WRT the QoS management is pretty simple. AND I really do not like BSD for anything, just not a fan. For more complex network configs and remote settings I really like Untangle. My home network is a series of nodes and the main one is untangle, that said I still make the web GUI accessible on each router to tweak individual configs. I chose Untangle because , 95% of what I do is in a terminal and it runs Debian. If I have to use a GUI Untangle's GUI is really nice and friendly + extremely resourceful. I like how they have a mini desktop in the Web Management interface , I can just pop open a terminal and make moves in Debian. One of the benefits of running a Untangle is installing to and actual PC and not a SoC. I can get anything done that I could from my daily driver from the Debian terminal. You can do the same with PFsense but this is only my opinion. Some years back I was testing it out, and also tried FreeNAS but the BSD factor was killing me and at that point I didn't know a lot about BSD. For instance I didn't know I could change the shell to bash , maybe I would have formed a different opinion if I had knew that then ( years ago). Can you do an OpenVPN Server/Client install/tutorial and config , show how to get to your network remotely with shared .ovpn key with client app for Windows and Linux. Every time I set this up I always mess something up, I'm just trying to figure out where I go wrong.
reply
Croft
One problem with shaping Bittorrent is that few users who actually use it actually use the known 6881 etc ports. Bittorrent can be set to any high port you wish, so that will bypass the shaper. Unless of course it gets caught in a catch-all. Also, it's worth pointing out that the only thing you can shape is the outgoing stuff. That's fine, though, for instance getting a higher priority on acks alone will help keep the downloads coming in from choking. But if people think you can shape in and outgoing in your own router, well, you can't. You can shape what leaves, so the ISP would have to have another shaper on their end to deal with your incoming stuff. Otherwise data will just get shoved at you at the maximum speed anyway.
reply
One problem with shaping Bittorrent is that few users who actually use it actually use the known 6881 etc ports. Bittorrent can be set to any high port you wish, so that will bypass the shaper. Unless of course it gets caught in a catch-all. Also, it's worth pointing out that the only thing you can shape is the outgoing stuff. That's fine, though, for instance getting a higher priority on acks alone will help keep the downloads coming in from choking. But if people think you can shape in and outgoing in your own router, well, you can't. You can shape what leaves, so the ISP would have to have another shaper on their end to deal with your incoming stuff. Otherwise data will just get shoved at you at the maximum speed anyway.
reply
Peter
A lower priority for downloading games makes a lot of sense but you also can simply set this in Steam, I don't know about Battlenet. Though the settings in Steam are limited (only a few preset options, you can't simply enter a number for some silly reason). It also is nice if you are the only one who uses the internet that some bandwidth is left for regular internet usage, it is better if downloading the games takes 70 minutes instead of 60 minutes but in the meantime you can watch Youtube, stream music...than that the game downloads in 60 minutes and the internet gets slow.
reply
A lower priority for downloading games makes a lot of sense but you also can simply set this in Steam, I don't know about Battlenet. Though the settings in Steam are limited (only a few preset options, you can't simply enter a number for some silly reason). It also is nice if you are the only one who uses the internet that some bandwidth is left for regular internet usage, it is better if downloading the games takes 70 minutes instead of 60 minutes but in the meantime you can watch Youtube, stream music...than that the game downloads in 60 minutes and the internet gets slow.
reply
Duximus
Pfsense is way overkill for most users, and the defaults don't really cover all that much. As you said, you often have to tweak the rules it sets, and this can be daunting for PC enthusiast, nevermind average joe. Instead you could take a look at openwrt or an derivative (e.g. gargoyle, as it has the simplest and best catch-all shitty isp compensating qos) as these are often an better option for SOHO use. Those also have the benefit of being sometimes able to be flashed to your current ARM router box.
reply
Pfsense is way overkill for most users, and the defaults don't really cover all that much. As you said, you often have to tweak the rules it sets, and this can be daunting for PC enthusiast, nevermind average joe. Instead you could take a look at openwrt or an derivative (e.g. gargoyle, as it has the simplest and best catch-all shitty isp compensating qos) as these are often an better option for SOHO use. Those also have the benefit of being sometimes able to be flashed to your current ARM router box.
reply
zoologic05
This was a really good video tutorial even though you don't explain every settings in deep detail. But I guess most ppl are able to do some own trial and error and setup what they think will work the best for their needs, so this was definately a good starting point to try this out. I've earlier used bandwith limiters but now I see that this kind of setup will probably be far better and easier to manage. Thanks!
reply
This was a really good video tutorial even though you don't explain every settings in deep detail. But I guess most ppl are able to do some own trial and error and setup what they think will work the best for their needs, so this was definately a good starting point to try this out. I've earlier used bandwith limiters but now I see that this kind of setup will probably be far better and easier to manage. Thanks!
reply
HRSCR
Hi, Chris. I really enjoy and appreciate your videos, you are the reason that i decide setup pfsense on a PC machine. This video blow my mind, because i had problems with the PlayStation 4 of my kids, because Nat 3 restrictions to the PS4 ports, and seems that this is the best way to fix it. I can setup my pfsense in a correct way, it is working stable and very quick. Thanks a lot for your work. My best regards.
reply
Hi, Chris. I really enjoy and appreciate your videos, you are the reason that i decide setup pfsense on a PC machine. This video blow my mind, because i had problems with the PlayStation 4 of my kids, because Nat 3 restrictions to the PS4 ports, and seems that this is the best way to fix it. I can setup my pfsense in a correct way, it is working stable and very quick. Thanks a lot for your work. My best regards.
reply
7MBoosted
I know this video is a few years old, and it is nice to see that pfsense allows for service shaping. But what if I wanted to prioritize specific devices or VLANS as opposed to specific services. Am I able set a priority for specific machines. And set a low priority for, let's say iot devices that are segregated on their own van. Or would that stuff be better done through bandwidth management?
reply
I know this video is a few years old, and it is nice to see that pfsense allows for service shaping. But what if I wanted to prioritize specific devices or VLANS as opposed to specific services. Am I able set a priority for specific machines. And set a low priority for, let's say iot devices that are segregated on their own van. Or would that stuff be better done through bandwidth management?
reply
Giacomo
Hi Chris, -8:18 you said IPSEC is what OpenVPN uses.
I followed your tip setting it with high priority, but from the created floating rules I can see it prioritizes traffic on port 500. My OpenVPN instances don't use that port. Would be enough if I change the port on that rule with the port range I use for my VPNs? Thank you
reply
Hi Chris, -8:18 you said IPSEC is what OpenVPN uses.
I followed your tip setting it with high priority, but from the created floating rules I can see it prioritizes traffic on port 500. My OpenVPN instances don't use that port. Would be enough if I change the port on that rule with the port range I use for my VPNs? Thank you
reply
Martin
Hi there, i have a question, i have normal router with wifi antenna that my mobile and another devices connect to my router wirelessly, and i have pfsese firewall but it doesn't support wifi my question is how can i connect my pfsese firewall to my router then my wifi devices can connect to my pfsense wirelessly?? Thnx
reply
Hi there, i have a question, i have normal router with wifi antenna that my mobile and another devices connect to my router wirelessly, and i have pfsese firewall but it doesn't support wifi my question is how can i connect my pfsese firewall to my router then my wifi devices can connect to my pfsense wirelessly?? Thnx
reply
Mike
great video!!! steam downloads were KILLING my connection! i live in a semi-rural area with a 30mbit down 4mbit up connection. we couldn't watch a youtube video while a game updated on another machine. after setting my PFsense box up according to your tutorial everything works great!!! THANK YOU! :)
reply
great video!!! steam downloads were KILLING my connection! i live in a semi-rural area with a 30mbit down 4mbit up connection. we couldn't watch a youtube video while a game updated on another machine. after setting my PFsense box up according to your tutorial everything works great!!! THANK YOU! :)
reply
Add a review, comment
Other channel videos
