ShieldGate Docs

Network firewall

WAN and QoS

SD-WAN policies and QoS (tc) policies for path and bandwidth control.

Goal

Steer WAN paths with SD-WAN policies and shape traffic with QoS policies.

Prerequisites

  • Multiple uplinks or marked paths when using SD-WAN.
  • network.write.

Steps

  1. Open Network → WAN / QoS.
  2. Create an SD-WAN policy (match + preferred paths / members as exposed).
  3. Create a QoS policy (classes/rates as exposed; appliances apply via tc hooks on Linux).
  4. Publish during a maintenance window if changing production WAN preference.
  5. Monitor apply status and application latency after cutover.

Tips

  • Start with observe-only path preference in lab before failing over production.
  • QoS misconfiguration can starve management traffic—preserve an unrestricted class for admin access.
  • Combine with firewall allows so health probes for SD-WAN members succeed.

Verify

  • Policies appear under WAN / QoS.
  • Linux appliances show intended qdisc / path selection after publish.