Bobcares

Introduction to pfSense Limiter

by | May 31, 2024

Learn how to use pfSense Limiter for better bandwidth management. Our pfSense Support team is here to help you with your questions and concerns.

Introduction to pfSense Limiter

Limiters in pfSense help control and manage bandwidth within a network. They let us set maximum bandwidth limits for specific IP addresses, subnets, or types of traffic. This helps with efficient network usage and also prevents any single user or service from monopolizing bandwidth.

Introduction to pfSense Limiter

Let’s take a look at some instances where Limiters in pfSense come in handy:

  • Limiting Individual User Bandwidth:

    Restrict the internet bandwidth of a specific user to 1 Mbps.

  • Distributing Bandwidth Equitably:

    Allocate 10 Mbps of bandwidth evenly among all users on the LAN network.

  • Setting Network-wide Limits:

    Cap the total bandwidth for the OPT network at 5 Mbps.

  • Restricting Specific Protocols:

    Limit FTP traffic to a maximum of 2 Mbps.

How do Limiters Work in pfSense

Limiters are created in two main steps:

  • Creating the Limiter:

    This involves setting up a pipe with a defined maximum bandwidth, which can operate globally or for a group of IP addresses.

  • Creating Assignment Rules:

    These rules specify which traffic will be limited by which pipe.

Furthermore, Limiters are set up in pairs for both incoming and outgoing traffic. They are organized hierarchically:

  • Root Limiter (Pipe):
    This defines the overall bandwidth and latency.

  • Child Limiters (Queues):
    Manage priority and weights for different types of traffic.

How to Set Up an Upload Limiter in pfSense

  1. First, go to Firewall > Traffic Shaper > Limiters.
  2. Then, click the “+ New Limiter” button.
  3. Now, it is time to configure the Upload Limiter:
    • Enable: Check this box.
    • Name: Set a name.
    • Bandwidth: Set the limit.
    • Mask: Select “none” to apply the limit to all outgoing traffic.
    • Description: Add a description if desired.
  4. Finally, click “Save” and then “Apply Changes”.
  5. Then, click “+ Add new Queue” under the new upload limiter.
  6. Now, it is time to configure the upload queue with these settings:
    • Enable: Check this box.
    • Name: Set a name.
    • Mask: Choose “Source addresses” and set the mask size to “/32” to limit per source IP.
    • Weight: Set a value between 1-100 for priority, or leave empty for fair distribution.
  7. Next, click “Save” and “Apply Changes”.
  8. We have to repeat the same steps to create a download limiter, using “Destination addresses” for the queue mask.

Associating Traffic with Limiters in Firewall Rules

  1. First, go to `Firewall > Rules and select the LAN tab.
  2. Then, edit each filtering rule for Internet access.
  3. Now, click “Display Advanced” to show advanced options.
  4. At this poitn, go to the “In / Out pipe” settings and select the upload limiter for the first drop-down.
  5. Then, choose the download limiter for the second drop-down.
  6. Now, click “Save” to apply changes.
  7. We have to repeat these steps for each rule that needs limiters applied.

Verifying Limiter Functionality in pfSense

  1. First, go to Diagnostics > Limiter Info in the pfSense interface.
  2. Review the displayed parameters and values for each limiter.
  3. Also, make sure they are set up correctly and functioning as intended.

By carefully setting up and managing limiters in pfSense, we can control bandwidth usage effectively.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

In brief, our Support Experts demonstrated how to use pfSense Limiter for better bandwidth management.

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

Never again lose customers to poor
server speed! Let us help you.

Privacy Preference Center

Necessary

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

PHPSESSID - Preserves user session state across page requests.

gdpr[consent_types] - Used to store user consents.

gdpr[allowed_cookies] - Used to store user allowed cookies.

PHPSESSID, gdpr[consent_types], gdpr[allowed_cookies]
PHPSESSID
WHMCSpKDlPzh2chML

Statistics

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

_ga - Preserves user session state across page requests.

_gat - Used by Google Analytics to throttle request rate

_gid - Registers a unique ID that is used to generate statistical data on how you use the website.

smartlookCookie - Used to collect user device and location information of the site visitors to improve the websites User Experience.

_ga, _gat, _gid
_ga, _gat, _gid
smartlookCookie
_clck, _clsk, CLID, ANONCHK, MR, MUID, SM

Marketing

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

IDE - Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

test_cookie - Used to check if the user's browser supports cookies.

1P_JAR - Google cookie. These cookies are used to collect website statistics and track conversion rates.

NID - Registers a unique ID that identifies a returning user's device. The ID is used for serving ads that are most relevant to the user.

DV - Google ad personalisation

_reb2bgeo - The visitor's geographical location

_reb2bloaded - Whether or not the script loaded for the visitor

_reb2bref - The referring URL for the visit

_reb2bsessionID - The visitor's RB2B session ID

_reb2buid - The visitor's RB2B user ID

IDE, test_cookie, 1P_JAR, NID, DV, NID
IDE, test_cookie
1P_JAR, NID, DV
NID
hblid
_reb2bgeo, _reb2bloaded, _reb2bref, _reb2bsessionID, _reb2buid

Security

These are essential site cookies, used by the google reCAPTCHA. These cookies use an unique identifier to verify if a visitor is human or a bot.

SID, APISID, HSID, NID, PREF
SID, APISID, HSID, NID, PREF