UniFi Gateway - Traffic Rules

Traffic Rules is a feature found in the Traffic Management section of your Network application that provides powerful security filtering to Block, Allow, or Speed Limit specific traffic.

Common use cases for Traffic Rules are:

• Parental Controls: Block specific apps / websites at specific times.
• Speed Limit: Set download and upload limits for specific clients.
• Domain Filtering: Prevent clients from accessing specific domains.
• Network Isolation: Prevent clients on different LAN networks from communicating with each other.

Requirements

• A Next-Gen UniFi gateway or UniFi OS Console with an integrated Next-Gen gateway.

Available Options

Traffic Rules can be configured to:

• Block, Allow or Speed Limit traffic.
• Match an entire LAN network or a specific client device.
• Match specific traffic categories such as an App or Domain.
• Be always active or on a schedule.

Specific traffic can match on the following categories:

• App
• App Group
• Domain Name
• IP address + port
• IP address range
• Region
• Internet
• Local Network

Note: Domain matching requires the client devices to use the UniFi gateway as the DNS server.

Examples

If you want to Block your child's iPad from accessing specific websites past their bedtime, then create a Traffic Rule with the following options:

• Action: Block
• Category: App
  • Select an app such as YouTube or Twitch
• Target: iPad
• Schedule: Every week from Monday to Friday from 9:00PM to 8:00AM. 

If you want to Speed Limit a PC when it is performing updates, then create a Traffic Rule with the following options:

• Action: Speed Limit
• Category: App
  • Select an app such as Windows Update
• Download Limit: 10Mbps
• Upload Limit: 10Mbps
• Target: PC
• Schedule: Always

If you want to Block clients on other Virtual Networks from communicating with the Default network, then create a Traffic Rule with the following options:

• Action: Block
• Category: Local Network
• Local Network: Default
• Direction: Traffic from all local networks
• Target: One or more virtual network(s)
• Schedule: Always

Frequently Asked Questions