Project

General

Profile

Actions

Todo #12990

closed

Feedback on pfSense® software Configuration Recipes — Configuring CoDel Limiters for Bufferbloat

Added by Marcos M over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Traffic Shaping
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Page: https://docs.netgate.com/pfsense/en/latest/recipes/codel-limiters.html

Feedback:
Implementing this as-is will lead to some issues detailed in #9263 (and in the forum thread referenced on #9024). This can be seen by running a traceroute which shows each hop as the same IP. It would be helpful to add a note about adding a second rule to exclude ICMP.

Additionally, consider implementing the rule(s) as match rather than pass - e.g.:

match  out  on {  igb0  } inet proto icmp  from 192.0.2.7 to any  tag "shaper_bypass" ridentifier 1647823342  label "id:1647823342"  label "USER_RULE: bypass traffic shaping" 
match  out  on {  igb0  } inet from 192.0.2.7 to any  !  tagged "shaper_bypass" ridentifier 1645993470  dnqueue( 1,2)  label "id:1645993470"  label "USER_RULE: traffic shaping" 

Actions

Also available in: Atom PDF