mirror of https://github.com/wg-easy/wg-easy
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1.8 KiB
1.8 KiB
| title |
|---|
| Bandwidth Limiting |
WG-Easy supports global bandwidth limiting for all VPN traffic using Linux Traffic Control (tc).
How It Works
Bandwidth limiting uses Linux Traffic Control (tc) with HTB (Hierarchical Token Bucket):
- Download limiting: Applied directly to WireGuard interface egress
- Upload limiting: Uses IFB (Intermediate Functional Block) device to mirror ingress traffic
The tc commands are injected as PostUp/PostDown hooks in the WireGuard configuration.
Setup Guide
1. Access Admin Panel
Navigate to Admin Panel → General section.
2. Enable Bandwidth Limiting
Toggle "Enable Bandwidth Limiting" switch to ON.
3. Configure Limits
| Setting | Description | Range |
|---|---|---|
| Download Limit (Mbps) | Max download speed for clients | 1-10000 (0 = unlimited) |
| Upload Limit (Mbps) | Max upload speed from clients | 1-10000 (0 = unlimited) |
4. Save Settings
Click Save. WireGuard interface will automatically restart to apply changes.
Requirements
Download Limiting
- Works out of the box on all Linux systems
Upload Limiting
Requires the ifb (Intermediate Functional Block) kernel module:
# Check if IFB is available
modprobe ifb
lsmod | grep ifb
If IFB is not available:
- Download limiting will still work
- Upload limiting will be skipped
- A warning will display in the admin panel
Troubleshooting
Bandwidth limits not applied
- Check if container has
NET_ADMINcapability - Verify WireGuard interface is running:
wg show - Check tc rules:
tc qdisc show dev wg0
Upload limiting not working
- Check IFB module:
lsmod | grep ifb - Ensure container has
SYS_MODULEcapability - Some cloud VPS may not support IFB kernel module
Settings not saving
Check browser console and server logs for API errors.