"Set Priority" to a specific LAN rule

[Mayo132]

Hey everyone,

I would like to ask if there is a possibility to prioritize a specific LAN rule.

The reason why iam asking is Microsoft Teams. For example, at the moment some people are sharing one ISP connection (100/40 Mbits). Now when someone starts a download an reach out the Internet limitation, the videostreams of MS Tems starts to stutter or the clients get a disconnect.

Now iam looking for a solution, to say, that the traffic which belongs to Rule "MS TEAMS" always will get a higher priority.

I think this is possible, but at the moment, i do not know how i can realize this.

Maybe it could be the "Set Priority" settings in the ruleset?

Thanks a lot.

Mario

[CJ]

Have you looked at the traffic shaper?

https://docs.opnsense.org/manual/shaping.html

[Mayo132]

Hi,
thanks. This is what iam looking for. But i have some problems to understand it. So please let me ask a further question.

My ISP Connection: 100 MBit/s down // 40  MBit/s up

So what have i done until now:

1. Setting up a pipe (Fiewall -> Shaper -> Pipes)
  See "pipe-download" and "pipe-upload" pictures

2. Setting up a queue - for upload und download > "Attachment Queue"
3. Setting up a ruleset for upload and download > "Attachment Rule"

With this rule i limit the speed to
Download: 95 Mbit /s
Upload: 35 Mbit/s

The reason why limiting is, that there was some problems with Videocalls and after adding this rules (like some mentioned in this forum) - everything is working better.

But  how can i add a ruleset for "priortizing" the traffic for MS TEams
> MS Teams needs the UDP Ports outgoing 3478-3481

How can i add these to the shaper ?

Thanks a lot.

[Mayo132]

Adding - an Atachment


If i get it right, i have to reduce the weight of the actall queue to "70" and create a new one with the weight "90".

Then i have to go to "Rules" and create a new Ruleset

Like show in the Attachment "2023-10-25... Shaper Firewall".
But but should i choose "upload or download" ? I think upload ?

[Seimus]

To your question, you use both, VOICE is bidirectional traffic. Video depending if you stream as well or not is Multicast based so unidirectional, ether you are the receiver or sender. From the issue describe the problem occurs during download so download is the problem here however you should do it for both direction.

Another and more important thing, if you are using FQ_CODEL then you can not use Weighted queues, FQ_CODEL doesn't use that. So if you want to use FQ_Codel you need to create separate pipes for each service. Or dont use FQ_Codel if you want to have only one pipe and use Weighted queues

https://forum.opnsense.org/index.php?topic=6748.0
https://forum.opnsense.org/index.php?topic=36410.0

The link that CJ provided there you can see examples of BW reservation for VOICE, you can do same for VIDEO
https://docs.opnsense.org/manual/how-tos/shaper_dedicated_bw.html

Regards,
S.