Transition from pfSense

Started by elCapitan, January 07, 2017, 03:05:02 PM

Previous topic - Next topic
Hello, I am curious about moving onto opnSense from pfSense.

My current setup consists of 2 pfSense instances in ESXi.

...WAN..... [pfSense Box 1]...Internal Switch....[pfSense Box 2]..... LAN....

Hence Box 1 is for ppoe connection and traffic shaping
Box 2 is for squid proxy cache.

The reason for this was to work around the issue of the proxy cache content being shaped by the firewall rules and not going a full LAN speed.
(I tried playing around with the rules, before this and still had issues).

-

I was wondering if this issue has happened to anyone with opnSense with traffic shaping and proxy cache in the one box.

Hi elCapitan,

The shaper in OPNsense was completely reworked in 2015 to use what pfSense called the "limiter", but based on IPFW FreeBSD standards. This solved a lot of problems for people, e.g. the ones who "needed to stay" on 2.1.x. Some still are on those versions today. ;)

We have had one single compatibility issue since then: the Multi-WAN wasn't working with the shaping (or captive portal as it also used IPFW) in tandem. This is planned for 17.1. The fix is currently in testing.

Of course, I can't give a 100% guarantee here as I don't know your full setup. You will have to see for yourself. But feeling lucky here... :)


Cheers,
Franco

Thanks for the info.
Guess I'll have to test it :)