How To Fix Bufferbloat in pfSense For Better Network Performance [YouTube Release]

Additional Resources:

Configuring CoDel Limiters for Bufferbloat
https://docs.netgate.com/pfsense/en/latest/recipes/codel-limiters.html

Traffic Shaper video by Mark Furneaux

Connecting With Us

Lawrence Systems Shirts and Swag

►👕 Lawrence Systems

AFFILIATES & REFERRAL LINKS

Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

UniFi Affiliate Link
:shopping_cart: Ubiquiti Store

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: Partners We Love – Lawrence Systems

Gear we use on Kit
:shopping_cart: Kit

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct | Refurbished Tech | Server Supply Store

Digital Ocean Offer Code
:shopping_cart: DigitalOcean | Cloud Infrastructure for Developers

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - UniFi Cloud Hosting

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: Buy VPN with Credit Card or PayPal | Private Internet Access

Patreon
:moneybag: https://www.patreon.com/lawrencesystems

Chapters
00:00 Bufferbloat in pfsense
01:09 Understanding Traffic Shaping & Traffic Prioritization
02:49 Testing for buffer bloat
03:41 How To Setup Limiters in pfsense
05:12 Creating Floating Firewall Rule
07:00 Troubleshooting Buffer Bloat Rules

#firewall #pfsense

Awesome Tom!

Tried this out on a customer whose site who is served via a variable quality mobile 5g broadband router connection (no other choice)

Purely anecdotal but with multiple users on the network it’s really improved the overall “user feeling” on internet usage :slight_smile:

PS i was very aggressive in lowering the up/down Mbit figures from the ones shown on the test site

Harry

1 Like

Hey Tom, I have both an xcp-ng host and a truenas box both backing up to backblaze. Due to the speed of the link, the backups sometimes overlap so picking a throttle speed is tricky. Could I use a traffic limit like this to limit all traffic to backblaze at a certain rate?

I do believe its applied at the interface level perhaps you can create some firewall rules that then get shaped based on your conditions and the other traffic not.

Or apply the shaping to a vlan and put your machines on that.