Traffic Shaper is a show stopper

[guest16744]

Hi,

I was looking into OpnSense from the start and so far it's a nice piece of software. The only show stopper here is the traffic shaper. I need a real traffic shaper that allows me to share available bandwidth and do other tricks while holding a big tree of queues.

The current solution is just a bunch of pipes that are not really doing the same thing. What about bursts together with priority? Don't see how this should work.

I wonder why you didn't move to an OpenBSD kernel at some point or just built a custom kernel to keep the ALTQ alive. I understand that for the end user, the pipe system is easier to understand but if you need real traffic shaping this isn't the way to go :-/

As sad as this is, after installing and configuring OpnSense on my Supermicro box, I have to install pfSense again because I'm not able to live without a "real" traffic shaping environment.

KR,

G.

[franco]

The decision to remove ALTQ and also the layer 7 classification with it were simple and easily searchable in this forum: in 2015 we did this in accordance with the user base we had to retain long term sustainability

It was done to remove unmaintained pieces of software that caused issues nobody would work on in FreeBSD, sometimes even pfSense. You could see ALTQ related driver shaping breakage in 2.3 and 2.4. We also fixed HA+limiter usage which is still broken over there a long time ago. FreeBSD disables ALTQ by default, probably deletes it in the next couple or years.

OpenBSD killed ALTQ already. Migrating to OpenBSD would be years of work and less features, I’m sure people who said we should have migrated would be the same people that said it’s an inferior feature set if we did try it. Can’t win this either way so now we have HardenedBSD which adds most OpenBSD security benefits and keeps our feature set intact.

We are happy with the results and we don’t want to go backwards. If pfsense works for you that makes us happy too.


Cheers,
Franco

[muchacha_grande]

I agree with Grimeton,
   I migrated from pfSense a year ago just because the desicions made by it's team.
   I found at OPNSense a much better firewall solution on almost every aspect but on traffic shapper.
   I think that sooner or latter traffic shapper should be improved to support some missing features at the moment.
   Queue priorities and traffic filtering at first place, i think.
Cheers...

[mimugmail]

Yep, but Dummynet doesn't offer this, so it's a lack in FreeBSD, not OPNsense. I'm also on this topic to build Cisco hierarchical CBWFQ within OPN, but it seems it's simply not possible