More information about OPNsense can be found in the Best Open-Source Firewalls article written by Sunny Valley Networks. It has load balancing, virtual private network, and traffic shaping capabilities, and more can be added via plugins. Recently, …OPNsense has a web-based interface and is compatible with the x86-64 platform. It supports wireguard and dynamic DNS, among other features. They may be set by us or by third party providers whose services we have added to our pages.OPNsense is a firewall and routing software that is open source and based on FreeBSD. These cookies enable the website to provide enhanced functionality and personalisation. QoS offers a means of prioritizing different types of traffic, ensuring that high priority services receive the bandwidth they need before. Without traffic shaping, packets are processed on a first in/first out basis by the firewall. Traffic shaping, or network Quality of Service (QoS), is a means of prioritizing network traffic. WAN and LAN are now set up and ready to use with OPNsense.Traffic Shaper. For Bridge: Select your LAN Linux Bridge (‘ vmbr2 ‘ in this example) For Model: Select VirtIO (paravirtualized) Click Add. Select OPNsense VM > Hardware > Add > Network Device. Here's a thread going over how to setup OPNsense to prevent buffer bloat, my settings very closely mirror that thread but I've made some tweaks to my setup to support ipv6.Choose your OPNsense VM, located under your sever node dropdown. before moving to opnsense I used OpenWRT and when enabling Codel or Cake QoS it would achieve A+ too. Have to live with the new interface then.I dont know what else to try. We are planning to migrate from Sophos UTM and I found this concept of Sophos a bit more organised. – vidarlo at 10:00 Oh! Thanks for the clarification.

PFSense (and OPNSense) tries to have a close mapping between underlying rules and what you see (and configure) in the web ui. Cake is not actually done yet and their mailing list is caught in a 'Can we fix some edge cases or do we need to revert some much wanted but not required features. The main difference is pie plays better with hardware implementations.

Pie is nearly identical to Codel for characteristics.

Protectli box