OPNsense Forum

English Forums => General Discussion => Topic started by: Adrian on March 26, 2019, 04:06:41 pm

Title: Question about IPSec + Traffic Shaping setup
Post by: Adrian on March 26, 2019, 04:06:41 pm
Hello community!

I'm here searching for some advice for the setup that I'm working on, basically I'm configuring the "Traffic Shaping" options in OPNSense (OPNsense 18.7.2-amd64) in order to get some QoS.

Summary (every pipe, queue or rule is applied to upload/dowload):

·Pipe for VoIP.
·Pipe for video conference.
·Pipe for general purpose.
-This is in order to guarantee a performance on some services but restricting the bandwidth use.

·Queue attached to the general pipe (bulk data transmission, thats filteres from the origin/destination server) - Weight 1
·Queue attached to the general pipe (the rest of the use) - Higher weight (recommendations will be heard)

-I have more rules but I'll just explain the VoIP relatd for this case.
·Rule for incoming packets to the VoIP server, will use the download pipe for VoIP.
·Rule for outgoing packets from the VoIP server, will use the upload pipe for VoIP.

I also have one IPSec tunnel configured, some VoIP communication come from it to the VoIP server and vice versa.

With that in mind.. Do I need to configure something else in order to make all the VoIP packets (from/to the VoIP server) working on the correct pipe?

My doubts came since I don't know how the OPNSense handle the situation in this case.. And well, any other suggestions about Traffic Shaping will be welcome since I'm still trying to figure out the best options for every case scenario.

Thanks in advance!