UniFi QoS and Traffic Shaping

In general, we recommend applying QoS and Traffic Shaping at the gateway, as it allows for granular control over all Internet-bound traffic and inter-VLAN routing. However, for deployments without a UniFi gateway—or when more localized control is needed for traffic that stays within the LAN—we also support applying QoS and traffic shaping on UniFi access points and switch ports. To do so:

1. Navigate to QoS Rules: Follow the path depending on your UniFi Network version:
   1. Network 9.4: Settings > Policy Table > Create New Policy > QoS
   2. Network 9.3: Settings > Policy Engine > QoS > Configure
2. Create Name: Assign a name to the rule.
3. Select an Objective
   • Prioritize: Moves selected traffic into a higher-priority queue to improve performance.
   • Limit: Restricts selected traffic to a specific upload/download speed.
   • Prioritize and Limit: Moves selected traffic into a higher-priority queue and enforces a maximum upload/download speed.
4. Select Interface(s): The rule can apply to a VPN Tunnel, WAN interface, or all WANs.
5. Configure Source and Destination: The Objective configured in (2) will apply to traffic meeting all specified criteria.
   1. Source
      1. Any: Applies to any traffic originating from inside the local network.
      2. Device: Specify certain client devices.
      3. Network: Specify certain network(s) (VLANs).
   2. Destination
      1. Any: Applies to any, no matter what its destination is.
      2. App: Specify specific applications or categories of applications.
      3. IP: Specify certain IP addresses or IP address ranges, and ports associated with the destination traffic.
      4. Domain: Specify one or more domains associated with the destination traffic.
         Note: Requires the client devices to use the UniFi gateway as the DNS server.
      5. Region: Specify one or more countries associated with the destination traffic.
   3. (Optional) Set a Schedule: Set up a Schedule for when the rule should apply.
6. Customize the rule for your desired outcome.
   • Source: Choose a Network, Device, etc.
   • Destination: Choose a specific App, Domain, IP, or Region.
7. Click Add.

Once added, your rule will appear in the table and take effect immediately.

Example QoS Configuration

• Bandwidth Limit Devices: Restrict specific devices or applications from consuming excessive bandwidth.
  • Objective: Limit
  • Source: Select Device
  • Destination: Select App (e.g., Windows Update)
  • Download/Upload Limits: 10 Mbps each
  • Schedule: Always
• Prioritize Streaming Services: Improve video call or streaming stability.
  • Objective: Prioritize
  • Source: Select Device (e.g., work laptop)
  • Destination: Select App (e.g., Zoom, Netflix) or Category (Media Streaming Service)

Important Considerations for QoS Actions

Enabling QoS rules disables hardware offloading on the gateway, which may reduce maximum throughput across all clients and networks—not just those affected by the rule. The performance impact varies based on your gateway model and traffic conditions, and may reduce speeds by 24–45% for traffic exceeding 1 Gbps.

1. Navigate to Settings > Profiles > WiFi Speed Limits > Create New.
2. Name the rule.
3. Specify Upload and Download bandwidth limits.
4. Click Add.
5. Apply the bandwidth limitation to a WiFi SSID: Settings > WiFi > Select WiFi > Enable WiFi Speed Limit > Select Profile.

Egress Rate Limiting

1. Navigate to the specific port, or Port Profile the configuration will apply to.
   1. Individual Port: Ports > Select a Port > Manual > Enable Egress Rate Limit.
   2. Port Profile: Settings > Profiles > Ethernet Ports > Manual > Enable Egress Rate Limit.
2. Specify the limit.

DSCP Tags and IP Precedence

1. Navigate to the specific port, or Port Profile the configuration will apply to.
   1. Individual Port: Ports > Select a Port > Manual > Enable QoS.
   2. Port Profile: Settings > Profiles > Ethernet Ports > Manual > Enable QoS.
2. Specify the Protocol of traffic that should be added to this QoS queue.
3. Select the Match Type:Match on a specific DSCP or IP Precedence value. None matches on all traffic regardless of value.
4. Select a Code.
5. Remark Traffic: Optionally remark matched traffic with a specific DSCP or CoS value. If not specified, forwarded traffic keeps its originally set value. 
6. Specify a Queue: Assign matched traffic to a queue in order to prioritize it over other traffic. The queue range is 0 to 7 with 0 being the lowest priority.