Using Snort for traffic shaping

As mentioned earlier in the chapter, Layer 7 (deep packet inspection) traffic shaping has been removed from pfSense's built-in traffic shaper, and it is now recommended that you use a third-party solution such as Snort for such purposes. Configuring Snort can be somewhat involved, but if your traffic shaping requirements include some form of deep packet inspection, Snort can do the job quite well.

Get Mastering pfSense now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.