QoS issues (again)

Hello,

What are the results when you perform the test without any users on the network and please share result? Also have you tried directly testing without the FW? PC->directly connected to router->Speedtest? could you share result if you're getting exactly 500 or at least near 500MB DL speed w/o the FW?

Also could you share your current SFOS version? Thank you

Regards,

I have replied to you, but my post was flagged as spam, possibly due to the fact that I pasted speedtest links to share the results (was running the windows app this time).

Anyway, since I don't know when/if my reply will be unflagged, I am replying again..

So at the moment there is not much bandwidth consumed at the house

Run a speedtest (from a linux machine now) without the firewall rule enabled:

Download: 422.91 Mbps (data used: 407.7 MB)
32.73 ms (jitter: 4.52ms, low: 3.74ms, high: 253.45ms)
Upload: 52.96 Mbps (data used: 25.2 MB)
44.28 ms (jitter: 9.33ms, low: 19.42ms, high: 292.46ms)
Packet Loss: 0.0%

I enable the firewall rule again:

Download: 313.15 Mbps (data used: 238.5 MB)
5.93 ms (jitter: 1.43ms, low: 2.98ms, high: 12.61ms)
Upload: 47.09 Mbps (data used: 22.4 MB)
2.84 ms (jitter: 0.41ms, low: 2.27ms, high: 12.94ms)
Packet Loss: 0.0%

I disabled the rule again and at the next speedtest I got 430/45

I enabled it then once more and got 310/47

The ISP's router is set to bridge mode, which effectively turns it to an ONT

I have seen many times the speed reaching at 500, but even if I didn't, the QoS rule (which has the correct numbers for KBps) should not limit me to 300, it should at least give me the full available speed since it is capped at a higher speed that the actual one. It should not contantly cap me at 300

I am running the latest sfos version SFVH (SFOS 20.0.2 MR-2-Build378)

Hi ,

for future reference please post screen shots.

I am running a 250/100 internet connection, to get it to perform, I used the following settings. My peak is slightly less than maximum to allow for the VoIP service requirements.

Ian

Hi ,

for future reference please post screen shots.

I am running a 250/100 internet connection, to get it to perform, I used the following settings. My peak is slightly less than maximum to allow for the VoIP service requirements.

Ian

Thanks a lot for the example Ian!

I actually want to also limit the upload speed, so this setting alone would not do what I want, but nevertheless I tried your way.

I disabled the firewall rule and only set the below (based on your numbers, so setting my numbers double than yours)

Result:

Download: 254.42 Mbps (data used: 264.8 MB)
8.40 ms (jitter: 6.47ms, low: 2.36ms, high: 286.60ms)
Upload: 52.95 Mbps (data used: 24.5 MB)
43.45 ms (jitter: 1.38ms, low: 14.06ms, high: 49.38ms)
Packet Loss: 0.0%

I immediately change the settings to Disable "Enforce guaranteed bandwidth" 

Result:

Download: 424.80 Mbps (data used: 414.4 MB)
29.13 ms (jitter: 1.66ms, low: 5.16ms, high: 39.75ms)
Upload: 52.93 Mbps (data used: 25.2 MB)
42.67 ms (jitter: 1.65ms, low: 16.11ms, high: 49.23ms)
Packet Loss: 0.0%

It makes no sense... 

The settings I showed are only for overall lists, you then need toast QoS limits for applications to be able to apply them to individual rules.

Ian

OK, but this does not explain the aforementioned behavior..  

Additionally, I only want one simple thing..

I want the total bandwidth down/up to be restricted to a specific speed.

I don't want to apply rules to applications and/or users and/or machines

Nothing complicated. Just this simple thing.

In fact I have already - as mentioned - created a traffic shaping rule and applied it to a top rule for the whole network

It limits the speed to 300 although it should not, based on the numbers I set

I even applied the traffic shaping policy to a rule that has one test machine in it.

It does the same thing. Instead of limiting to 495 (I have set it to 62000 KBps), it limits to 300.

So the problem is not that traffic shaping does not work.

The problem is that its settings for the speed are not reflected by the outcome

Hi,

what chips are the nics running?

to limit the upload speed on an asymmetrical connection you will need to use application policies. 
ian