OPNsense Forum

Archive => 16.7 Legacy Series => Topic started by: elCapitan on January 07, 2017, 03:05:02 pm

Title: Transition from pfSense
Post by: elCapitan on January 07, 2017, 03:05:02 pm
Hello, I am curious about moving onto opnSense from pfSense.

My current setup consists of 2 pfSense instances in ESXi.

...WAN..... [pfSense Box 1]...Internal Switch....[pfSense Box 2]..... LAN....

Hence Box 1 is for ppoe connection and traffic shaping
Box 2 is for squid proxy cache.

The reason for this was to work around the issue of the proxy cache content being shaped by the firewall rules and not going a full LAN speed.
(I tried playing around with the rules, before this and still had issues).

-

I was wondering if this issue has happened to anyone with opnSense with traffic shaping and proxy cache in the one box.
Title: Re: Transition from pfSense
Post by: franco on January 07, 2017, 05:19:35 pm
Hi elCapitan,

The shaper in OPNsense was completely reworked in 2015 to use what pfSense called the "limiter", but based on IPFW FreeBSD standards. This solved a lot of problems for people, e.g. the ones who "needed to stay" on 2.1.x. Some still are on those versions today. ;)

We have had one single compatibility issue since then: the Multi-WAN wasn't working with the shaping (or captive portal as it also used IPFW) in tandem. This is planned for 17.1. The fix is currently in testing.

Of course, I can't give a 100% guarantee here as I don't know your full setup. You will have to see for yourself. But feeling lucky here... :)


Cheers,
Franco
Title: Re: Transition from pfSense
Post by: elCapitan on January 08, 2017, 01:24:04 am
Thanks for the info.
Guess I'll have to test it :)