Possible problem with traffic limiters on pfSense 2.4?

Hi everyone,

So recently I've noticed that some downloads (Windows update for example) don't seem they want to follow my traffic limiter rules. My internet speed is 25/5 so I set my limiter to 23/4.7 which has been working fine for almost 2 years. The problem seems to recently appear and i'm not sure if it was due to upgrading to 2.4 release.

as you can see here (https://puu.sh/yr2OL/10d4ae2202.png) my gateways are reporting almost 20% packet loss on my IPv4 and IPv6 Gateway. Here is a screenshot of my traffic graph when Windows update is downloading (https://puu.sh/yr2y5/91766d1b29.png) (NOTE: WAN says it's 24.50Mbps download, however, LAN is reporting 23Mbps which is what I set the limit to).

Here is a few photos of my limiter settings and firewall rules. (https://puu.sh/yr2x9/1e7c472c9a.png) & (https://puu.sh/yr2wG/26e6c0ed2b.png) are the limiter settings. The limiter settings are setup on my LAN interface and on both IPv4 and IPv6 (https://puu.sh/yr2v9/5787425033.png). I followed foxale08's guide a few years back on the pfsense forums and it has been working ever since. Right now I have had to set my download trafflic limit to 15mbps but the WAN graph is still showing fluctuating speeds from 17-20Mbps while the LAN graph is a steady 15Mbps.

Has anyone else had or is experiencing this problem? would setting the limiters to the WAN interface be a better option? (I had to set limiters on WAN interface for my PLEX server).

Thank you :)

Posted Nov 22, 2017, 3:39 AM UTC

Sort by:

BlindM0nk•8 yr. ago

Actually I noticed something similar on my setup but I I got dual Wan. I set it up for fail over but when my secondary connection is enabled my primary experiences 12-18% packet loss as per the gui and then it fails over due to the rules. But if I disable the secondary Wan interface the primary runs without issues.

If there is some information I could provide for assistance in troubleshooting or diagnosis please let me know.

barkollokrab•8 yr. ago

See release notes for 2.4.2. That ~~should~~ may answer your question.

edit

adx442•8 yr. ago

Traffic Shaping

Fixed an error when configuring a limiter over 2Gb/s (new max is 4Gb/s) #7979

Fixed issues with bridge network interfaces not supporting ALTQ #7936

Fixed issues with vtnet network interfaces not supporting ALTQ #7594

Fixed an issue with Status > Queues failing to display statistics for VLAN interfaces #8007

Fixed an issue with traffic shaping queues not allowing the total of all child queues to be 100% #7786

Fixed an issue with limiters given invalid fractional/non-integer values from limiter entries or passed to Captive Portal from RADIUS

Which part of this applies to his issue?

barkollokrab•8 yr. ago

Traffic Shaping

There are obvious bugs that are addressed in 2.4.2, so I think he should update and then report back if still seeing the problem.

vesikkOP•8 yr. ago

I'm currently on 2.4.2 and I did the windows update after updating to 2.4.2. I'm starting to think if I should put the traffic limiter rules on the WAN side or maybe it's a Microsoft specific issue because everything else seems to obey the traffic limiter rules.