Shaper to secure bandwidth is not working

[sjjh]

Hi! Running OPNsense 19.7.8-amd64. I run a local phone/SIP server (IP: 10.nn.nn.2)  on the network (VLANs: 10.nn.AA.0, 10.nn.BB.0, ...) and face VoIP quality problems when download bandwidth is used by other clients. Thus I'm trying to secure some bandwidth on the WAN interface for traffic coming from/to the phone/SIP server by using the shaper (Note: If there's a better way how to fullfill my requirements than using the shaper, please point me in the right direction.). I pretty much stuck to the first example in the how-to in the manual: https://docs.opnsense.org/manual/how-tos/shaper.html Unfortunately it seems not to work. Later, it would also be great if we could distribute the "other" (non VoIP) traffic between all clients evenly to prevent one client to take it all. But first goal is to fix the VoIP quality problems. Please find the config below (for pipes CoDel and PIE is not activated; queues are not used). Not sure what I did wrong. Any help appreciated! If you need any additional information, let me know.
Thanks Simon

[Quetschwalze]

Since your problem is with download bandwidth being starving your VoIP there is not much you can do. The opnsense box shaping incoming WAN traffic wouldn't help since your provider would drop traffic first to match your leased bandwidth. Thus, there is not much you can do apart from stopping downloads when you need to make a call. Or get a leased line with QoS Classes so that your provider can make an informed decision on what to drop when the bandwidth is saturated.

Gesendet von meinem MI 9 mit Tapatalk

[sjjh]

Thanks for the info. Still I'm curious about what I did wrong, so that it isn't working.
And any other idea how to solve the problem (besides increasing bandwidth or talking to our ISP to use QoS)?

[Quetschwalze]

I was playing around with the feature a bit and only got it to work properly when using the FlowQueue-CoDel scheduler type (Firewall -> Shaper -> Settings -> Pipes -> Edit Pipe in advanced mode). However it was never really shaping to the target rate I set but to some values around that - might need more playing around with it
Also you may want to try and set the direction in the ruleset: "Out" for Upload Pipes and in for Download

[sjjh]

This whole shaping seems not to work over here...

Since your problem is with download bandwidth being starving your VoIP there is not much you can do. The opnsense box shaping incoming WAN traffic wouldn't help since your provider would drop traffic first to match your leased bandwidth.

That does sound logical, and nevertheless exactly that use case is mentioned in the how to https://docs.opnsense.org/manual/how-tos/shaper.html#reserve-dedicated-bandwidth without stating that it only works in one direction (which would mean, that half of the tutorial is unnecessary).

I now tried to configure the second example in the how to, to distribute bandwidth evenly: https://docs.opnsense.org/manual/how-tos/shaper.html#reserve-dedicated-bandwidth That does neither work for me. I tried with a massive upload to the internet. My client got like all the upload bandwidth while other clients got nearly nothing...

I was playing around with the feature a bit and only got it to work properly when using the FlowQueue-CoDel scheduler type (Firewall -> Shaper -> Settings -> Pipes -> Edit Pipe in advanced mode).

Tried that as well then, without any success.

What is probably going wrong here?