OPNsense Forum

Archive => 23.1 Legacy Series => Topic started by: zerocool on July 08, 2023, 06:33:18 PM

Title: Traffic shapping using firewall
Post by: zerocool on July 08, 2023, 06:33:18 PM
I have questions , is there any plan to include qos shapping rules or qeues inside firewall policies

i mean when you create firewall rule i can mentioned this flow will go inside which queues
Title: Re: Traffic shapping using firewall
Post by: Patrick M. Hausen on July 08, 2023, 09:48:35 PM
https://docs.opnsense.org/manual/shaping.html
Title: Re: Traffic shapping using firewall
Post by: zerocool on July 09, 2023, 08:50:04 AM
thanks for reply , but this not what i mean

i mean to include the shaping inside the firewall rule

FW policy:

Allow - From source -- to desintation -going to specific shapping queue

give them priority inside queue High Priority which i defined

i am not sure if i am not clear in my question
Title: Re: Traffic shapping using firewall
Post by: Bunch on July 09, 2023, 09:20:51 AM
Quote from: zerocool on July 09, 2023, 08:50:04 AM
thanks for reply , but this not what i mean

i mean to include the shaping inside the firewall rule

FW policy:

Allow - From source -- to desintation -going to specific shapping queue

give them priority inside queue High Priority which i defined

i am not sure if i am not clear in my question

https://docs.opnsense.org/manual/how-tos/shaper_prioritize_using_queues.html
The rules inside traffic shaping already doing the same thing.
Title: Re: Traffic shapping using firewall
Post by: dinguz on July 09, 2023, 09:24:33 AM
Quote from: zerocool on July 09, 2023, 08:50:04 AM
i mean to include the shaping inside the firewall rule

FW policy:

Allow - From source -- to desintation -going to specific shapping queue

I think this is a conceptual misunderstanding; the way OPNsense is configured, fw rules and traffic shaping are separate entities, it is not possible to define them within a single fw rule.
Title: Re: Traffic shapping using firewall
Post by: bimbar on July 10, 2023, 11:49:37 AM
The reason is probably that PF does the firewalling, but the shaping is done elsewhere, as far as I know.

In other words, this may not be possible.