Messages

ports 1 to 6 are separated from each other's but not from 7 and 8

So it's not a switch but a piece of junk. A managed VLAN capable 1G switch is way below 50 $/€/£.

E.g. https://www.amazon.de/NETGEAR-GS308E-400EUS-Netgear-neu/dp/B0D4NTDSFR/

not arguing - just seeing this as an option to separate the devices (if needed) without any IT knowledge
also you can use it as a "normal" (Unmanaged) one with the slider on the "standard" position

not sure if this switch would be helpful but this is a switch with "fake" vlans

BrosTrend 8-Port 2.5G Ethernet Network Switch
https://www.brostrend.com/pages/s1-v2-specification

ports 1 to 6 are separated from each other's but not from 7 and 8

so if i understand correctly i would have to make 1 pipe (1up and 1down) that have 2 different ques / rules ?

The answer is not that simple, but no.

What exactly about the Fortnite ping is bothering you?
Please expand a bit, what is the issue?

Regards,
S.

when the internet fluctuate (the usage and internet quality)
i want the "ping" be taken care 1st (is the most important for us here LOL)

If you have two pipes and only 1 queue in each with any rules, the weight doesn't matter. Additionally if you don't set MASKs in queues the BW for WFQ is 1st come 1st server & STARVE OTHERS, it will not be shared towards multiple hosts. The configuration you mention should be used for reserving BW for dedicated Applications and not any/any rules.

Also what is your end-goal here?
If you target is to have stable connectivity for Games use FQ_C as games are latency prompt.

Regards,
S.

the fortnite ping is the end-goal

so if i understand correctly i would have to make 1 pipe (1up and 1down) that have 2 different ques / rules ?

will try that

but in the docs it says "FQ_CoDel ignores the weight: set to 100" - so that means there is no priority between them ?
or the "100" one will be 1st in line and the "50" second ?

also the rules sequence for the 100 (set) are 1 and 2
and for the 50 (set) 11 and 12 - will that put the 100 (set) ahead ?

It means what it said. FQ_Codel e.g the FQ of the FQ_Codel doesn't care about weights. Thus this means FQ_C can not do any BW  prioritization whatsoever. FQ splits the traffic equally. If you have a Pipe that has 100Mbit, if you have only one stream it can get whole 100Mbit. If after that second one comes, FQ will share the BW equally thus 50/50.

The ping in games or the ping to check for latency in services, if it has a dedicated BW doesn't represent the real performance of the application. Its intended to have it go thru the same Pipe as is the service itself.

In OPNsense, we do not have the possibility to do packet prioritization/we dont have PrioQ. We can only allocated BW, we can call it BW prioritization. If you need this you need to use Weighted schedulers such as WFQ of QFQ. But the weights are only locally significant, to the Pipe/scheduler running the Weighted scheduler, it will not affect other Pipes.
However these schedulers cant control and help during bufferbloat.

As long as the dedicated Pipe/Queues for the specific service you did created will not be congested + you will always hit the BW availability specified by your Pipes (summation of all pipes) you will not get latency even with Weighted schedulers. The problem starts when you will not met these conditions.

For that we have FQ_C or FQ_PIE. FQ_C was created in mind for Real-time-traffic such as voice audio and gaming.

Regards,
S.

YES

so will this help ?

2 sets of pipes/ques/rules (each set for up and down /load) with "fair weighted que"

1st with protocol udp / any / any - this one has weight 100 and rules are 1st in line
2nd with protocol ip / any / any  - weight 50

apparently
"Fortnite primarily uses the User Datagram Protocol (UDP) for its ping and gameplay data transmission"

Caveat emptor:

While there is an official guide, I recommend to work through this - and I really mean "through", because it does not only apply to IPv6, but also to specific rules for ICMPv4 traffic. Also, you will find that changing the traffic shaper sometimes requires a reboot before the settings are applied - this is not in the official guide.

thanks

yes i did expected this to be a complicated adventure ...
so i did try something - probably it is a silly idea but at least it did not "broke" the router (after some of my silliness i had to do the full reset)

i am trying to "prioritize" Fortnite gaming - specifically the "ping" in the game 
so i did ↓

2 sets of pipes/ques/rules (each set for up and down /load) with "fair weighted que"

1st with protocol udp / any / any - this one has weight 100 and rules are 1st in line
2nd with protocol ip / any / any

↑ does that make any sense ?

it seams to work well , did not do any "proper testing" i get A+ in the Bufferbloat test , in the game looks good but my internet always vary depending of day / time etc.

any idea ?

thnks

a question:

playing around with traffic shaping "FQ_CoDel"

i did 2 sets of pipes (each set for up and down /load)

all of them have the FQ_CoDel as a scheduler type
one set have weight 100 the other set have weight 50

but in the docs it says "FQ_CoDel ignores the weight: set to 100" - so that means there is no priority between them ?
or the "100" one will be 1st in line and the "50" second ?

also the rules sequence for the 100 (set) are 1 and 2
and for the 50 (set) 11 and 12 - will that put the 100 (set) ahead ?



practically i want 2 pipes with one of them being more "important" then the other ...


thanks

will do

a question:

playing around with "FQ_CoDel"

i did 2 sets of pipes (each set for up and down /load)

all of them have the FQ_CoDel as a scheduler type
one set have weight 100 the other set have weight 50

but in the docs it says "FQ_CoDel ignores the weight: set to 100" - so that means there is no priority between them ?
or the "100" one will be 1st in line and the "50" second ?

also the rules for the 100 (set) are 1 and 2
and for the 50 (set) 11 and 12 - will that put the 100 (set) ahead ?



practically i want 2 pipes with one of them being more "important" then the other ...


thanks

should i turn on the
services / intrusion detection
if YES which rulesets should i use

any recommendation ?

thanks

so far so good
the CPU temps are from 37° to 52° mostly around 42° (there is another sensor that shows 27° all the time)
using switch was a good idea - now i can just reset change the user/password and have everything working - in case i play too much with the setting and do something silly ...

i have to give it more time to be sure but the ping looks lower then before (asus ax86u pro) - thats for fortnite

and agree that the router seams an overkill:
the memory use 4%
disc 1%
cpu 2% jumping to 10 % (once 21%)

will keep tread updated - maybe some noobs find it useful 

thanks

the fan i am using on top of those fins took away all the "warmness" it spins very slowly no noise whatsoever ...

thanks everyone
will try to switch the routers today

was wondering if there is an "easy plugging" that can run in "auto" mode to make the router safer (by easy i mean no extensive setup that can easily screw thinks up - a noob level)
eventually i will try to learn things ...

BTW i notice that the pc appliance gets very warm - but after putting a 120 fan on top of it (connected to usb port with adapter) temp should not be a problem (will check the numbers with and without fan on and report it for future reference)

ok so the opnsense is installed - i changed nothing except the username and password ...

does anything needs to be tick on/off to make it safe(er)? - was told that it is "safe" out of box? - explenation, as safe as asus or other general consumer supported router
(will connect the wan later this week and check for updates)

the idea is to replace the asus router that is no longer supported
i understand that opnsense can be "anything/everything" depending on users needs and its a completely different animal then asus
but i am planning to run it in "vanilla" mode (maybe some simple plugging in "automatic" mode)

as mentioned above simple network 2 PCs on wire connection

thanks for any advice

apology
i am a noob - so probably this is a noob question but ↓
i did search for an answer but didnt get any definitive one, so ↓

i am planning putting opnsense on the PC appliance with 4 ports (this will be my 1st time with opnsense)
it will provide internet (300down /30up) to 2 computers (some browsing, gaming, streaming etc. no VPN, port forwarding or anything - very simple ...)

options:
1) it is suggested to use only 2 ports (wan,lan) on router and use separate switch - thats fine i have one but prefer not as is one more box/cables ...
2) bridge the ports on appliance - may slower the traffic
3) 2 separate vlans - may slower the traffic 

how much performance hit will i get with option 2 and 3 ?
- is it enough to worry about ?
- if not much which one is preferred ?

thanks everyone



hardware: 
Firewall Router Mini PC N100 Upgraded Fanless PC 4X i226-V 2.5G
16gb memory
128gb hd
and
TP-Link TL-SG105 5 Port Gigabit switch