FlexQoS FlexQoS 1.2.5 - Flexible QoS Enhancement Script for Adaptive QoS

[Hyacin]

Sorry if this has been asked, I searched and didn't find anything - is it possible to match 802.1p or IP Precedence to filter things into priority buckets? If not is it on the roadmap or anything?

Thanks!!

 

[dave14305]

Sorry if this has been asked, I searched and didn't find anything - is it possible to match 802.1p or IP Precedence to filter things into priority buckets? If not is it on the roadmap or anything?

Thanks!!

No plans for that. FlexQoS relies primarily on the classification done by the Trend Micro DPI engine. DSCP inbound from the WAN could be very unreliable, and not many applications on the LAN may set proper DSCP marks. And we really don’t know how the Trend Micro engine works and if it uses DSCP at all in its own classification already.

From a WebUI standpoint, there’s just no room to add another column to the iptables rules without breaking the visual layout of the page.

There’s nothing that would prevent you from adding your own iptables rules to firewall-start if you have a specific case in mind.

 

[Hyacin]

There’s nothing that would prevent you from adding your own iptables rules to firewall-start if you have a specific case in mind.

Oooo, would that be possible? I might explore that then, I didn't realize iptables could interact with QoS in any way (I honestly have zero idea how QoS works on these routers.)

Yeah, I've got WFH clients on my network and I'm hitting them at ingress with COS 4 so my switches prioritize them as they make their way through. Would just be nice to continue that through to the router and make 100% sure that traffic ends up in a high priority queue. I'm sure the "Work from Home" preset catches some of it, but it would just be nice to be 100% sure it was all getting in there.

 

[sentinelvdx]

Hi @dave14305 ! Is Dual WAN still braking QoS when enabled?

 

[dave14305]

Hi @dave14305 ! Is Dual WAN still braking QoS when enabled?

Not sure, I’ve never used Dual WAN. Is it supposed to be broken? I can’t recall.

 

[sentinelvdx]

Not sure, I’ve never used Dual WAN. Is it supposed to be broken? I can’t recall.

Oh, I thought it was a known issue, maybe it was just me. I'll give a try whenever I have some time and let you know.
On my experience, it happened to me that using Dual WAN and Flex 1.2.4 (can't remember which Merlin FW) QoS acted weird, and it even broke Skynet.

 

[Kingp1n]

@dave14305

Anything I should be concern at all for my specific setup? I know using a full time VPN plus the additional scripts makes everything a little complicated with A.QoS.

Like I mentioned earlier, everything is working as it should even with those particular devices showing as 'DNS' with the destination IP as 10.200.0.1.

I don't think those tracked connections as DNS thru the VPN are hurting the flow of things. Plus doubt there's anything else I can do since I'm using that specific script to show my VPN IP.

Thanks for everything!

 

[sentinelvdx]

Hi,

Today I noticed one of the cores of my router was 100%,, when checking it was ksoftirqd using 46% of CPU or more.
When I went into FlexQoS found refresh was disabled due to maxing out tracked connections.

I'm having this issue on the AC88U, and I'm using 100% my DL bandwidth

Any idea why that happens and how can I prevent that in future?

Thanks,

 

[dave14305]

When I went into FlexQoS found refresh was disabled due to maxing out tracked connections.

I'm having this issue on the AC88U, and I'm using 100% my DL bandwidth

Any idea why that happens and how can I prevent that in future?

Don’t use the internet so much. The tracked connections are just a reflection of the activity on your network. You can reenable Refresh if you want to.

What do you think was happening at the time?

 

[dave14305]

Anything I should be concern at all for my specific setup? I know using a full time VPN plus the additional scripts makes everything a little complicated with A.QoS.

Only be concerned if you reach the point when you no longer understand all the moving parts of your network.

I like experimenting with lots of things, but at the end of the day I prefer simplicity.

 

[sentinelvdx]

Don’t use the internet so much. The tracked connections are just a reflection of the activity on your network. You can reenable Refresh if you want to.

What do you think was happening at the time?

What?! Haha but that's why I use QoS, to don't worry when it's saturated.

I started looking and found several game clients downloading updates at the same time, plus my NAS uploading data to the cloud.
-Steam
-GoG
-Windows Updates
-My TV Streaming

After all finished doing their stuff all went back to normal

 

[geobernd]

Just wanted to add another word of praise:
I am switching my online backups from Crashplan to Backblaze (due to Crashplan's new 30 day only retention policy on deleted files).
Took me less than 5 minutes to add Backblaze's IP ranges to FlexQoS and classify so that all my other activities are not impeded. Now uploading at full throttle for a couple of weeks (thanks to only 18mbit/s upload) and if I didn't have a network traffic widget open I wouldn't even know there was any activity:
All other internet activity an any device - video chat, VoIP etc... - runs as if the whole connection was Idle....
Fantastic!!!

 

[dave14305]

Just wanted to add another word of praise:
I am switching my online backups from Crashplan to Backblaze (due to Crashplan's new 30 day only retention policy on deleted files).
Took me less than 5 minutes to add Backblaze's IP ranges to FlexQoS and classify so that all my other activities are not impeded. Now uploading at full throttle for a couple of weeks (thanks to only 18mbit/s upload) and if I didn't have a network traffic widget open I wouldn't even know there was any activity:
All other internet activity an any device - video chat, VoIP etc... - runs as if the whole connection was Idle....
Fantastic!!!

What range did you use? I use Backblaze B2 storage with Duplicati but haven’t setup a rule for it.

Another fun thing to watch is the FlexQoS Upload graph chugging away on File Transfers until you create higher priority traffic, then watch the big upload get throttled until things settle down again.

 

[geobernd]

I am using Backblaze Personal and added all 4 current IP ranges (probably only need the US West Coast ones but I had enough unused IP Table entries)... B2 probably uses different servers...

I actually gave it 'Others' so my legitimate File Transfers that I run every once in a while get higher priority...
And indeed I was watching the Upload graph to make sure it all works and my other transfer get higher priority etc... Networking can be fun

 

[dave14305]

I am using Backblaze Personal and added all 4 current IP ranges (probably only need the US West Coast ones but I had enough unused IP Table entries)... B2 probably uses different servers...

View attachment 36408

I actually gave it 'Others' so my legitimate File Transfers that I run every once in a while get higher priority...
And indeed I was watching the Upload graph to make sure it all works and my other transfer get higher priority etc... Networking can be fun

This is a really good case for using ipsets for the remote IPs, but there would not be an easy way to know what was contained in the ipset when processing the rules against the tracked connections in the GUI.

 

[geobernd]

This is a really good case for using ipsets for the remote IPs, but there would not be an easy way to know what was contained in the ipset when processing the rules against the tracked connections in the GUI.

I used the list of IPs from here - hopefully it won't catch much that is not Backblaze...
https://help.backblaze.com/hc/en-us/articles/217664588-Backblaze-IP-Address-List
From description it actually looks like it also covers the B2 servers....

 

[maghuro]

Something odd is happening.

I purposedly put Speedtest.net as Net Control and whenever I run a speedtest, it counts both as Net Control and Web Surfing.

The same tested with fast.com, it counts both as Streaming and WebSurfing.

Using the last "beta", is it possible that the ipv6 commit broke something?

https://pastebin.com/TLu2qe8g (Sorry, 10000 char limit)

Edit: I just noticed the following - Both fast.com and speedtest.net gave me around 850mbps down. As I can see, half of it (~400mbps) went to Web Surfing and the other half to Streaming (or NCP in the case)

 

[dave14305]

Something odd is happening.

I purposedly put Speedtest.net as Net Control and whenever I run a speedtest, it counts both as Net Control and Web Surfing.

The same tested with fast.com, it counts both as Streaming and WebSurfing.

Using the last "beta", is it possible that the ipv6 commit broke something?

https://pastebin.com/TLu2qe8g (Sorry, 10000 char limit)

Edit: I just noticed the following - Both fast.com and speedtest.net gave me around 850mbps down. As I can see, half of it (~400mbps) went to Web Surfing and the other half to Streaming (or NCP in the case)

View attachment 36414

Speedtests usually require multiple connections to load up a high-speed connection. It could be that only half the connections were properly classified by Adaptive QoS. You’d have to see what connections were listed under Tracked Connections for that device as Web Surfing while the speedtest was running. Usually on port 8080 or something close to that.

 

[dave14305]

I purposedly put Speedtest.net as Net Control and whenever I run a speedtest, it counts both as Net Control and Web Surfing.

I ran a speedtest.net test tonight and none of the connections were classified as Speedtest.net. I had Skype, Untracked, and HTTP (all on port 8080).

 

[maghuro]

S

I ran a speedtest.net test tonight and none of the connections were classified as Speedtest.net. I had Skype, Untracked, and HTTP (all on port 8080).

Something wrong with the last signature update?