Skip to main content
user_14
New Member
October 23, 2023
Question

Traffic Shaping

  • October 23, 2023
  • 4 replies
  • 8332 views

Hello, 

I have a problem with traffic shaping. I have a simple traffic shaping policy to limit the bandwidth when browsing some streaming websites and it's been working perfectly for a while. However, all those websites can't be accessed anymore, no changes were made in the policy. When I check the logs, it shows that those requests are UTM Allowed but the most of the times the received data is 0 kb and a "TCP reset from client" message. When I disable the traffic shaping policy everything goes back to normal. I'm not sure if I'm missing something or there's a flaw within my firewall (FortiGate 400F, V7.0.12).

Any ideas or hints ? 

Thank you in advance.

 

4 replies

AEK
SuperUser
SuperUser
October 23, 2023

Hi

Can you share your traffic shaping policy?

AEK
user_14
user_14Author
New Member
October 23, 2023

config firewall shaper traffic-shaper
edit "test_shaper"
set maximum-bandwidth 60
set bandwidth-unit mbps
set priority low
next
end


config firewall shaping-policy
edit 1
set name "TEST"
set status disable
set service "ALL"
set srcintf "port1"
set dstintf "port2"
set traffic-shaper "test_shaper"
set srcaddr "My_PC"
set dstaddr "all"
next

 

I also specified streaming websites in the application field (youtube and others)

BillH_FTNT
Staff
Staff
October 23, 2023

Hi @user_14 

Please share your network scenario. 

- What is outgoing interface BW 

- How much traffic did you configure Shaping ?

- What is your incoming throughput ? 

Please share more information about configuration as AEK mentioned too. 

 

Brs/Bill

user_14
user_14Author
New Member
October 23, 2023

Hi, 
config firewall shaper traffic-shaper
edit "test_shaper"
set maximum-bandwidth 60
set bandwidth-unit mbps
set priority low
next
end


config firewall shaping-policy
edit 1
set name "TEST"
set status disable
set service "ALL"
set srcintf "port1"
set dstintf "port2"
set traffic-shaper "test_shaper"
set srcaddr "My_PC"
set dstaddr "all"
next

 

I also specified streaming websites in the application field (youtube and others),

the outogoing interface BW is about 500 Mbps

kvimaladevi
Staff
Staff
October 24, 2023

Hi user_14,

 

Thank you for the config. Looks like the traffic shaping policy is disabled. Could you confirm if the traffic is hitting the correct policy?

 

Regards,

Vimala

 

Kangming
Staff
Staff
December 5, 2023

Please try "set tcp-mss-sender 1400" and "set tcp-mss-receiver 1400".

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-TCP-MSS-value/ta-p/194518

d_konyayev
Explorer
July 5, 2024

Hi, I have the same problem. It is on firmware 7.0.12-7.0.15 Have you found a solution to this problem?