Modern home internet often becomes a battleground for bandwidth, especially when multiple users are simultaneously running video conferences, online games, or downloading large files. Equipment owners Keenetic These companies are in an advantageous position because their devices feature advanced traffic management tools that allow for flexible prioritization. Speed limiting isn't just a way to punish a careless neighbor or child, but also an effective way to ensure the stability of critical applications.
Bandwidth management in routers Keenetic implemented through the mechanism QoS (Quality of Service), which allows the network administrator to define resource allocation rules. Instead of completely disabling access or blocking devices, you can allocate a guaranteed minimum or, conversely, set a hard ceiling for a specific device. This is especially relevant for plans where the advertised speed doesn't always correspond to the actual load during peak hours.
In this article, we'll cover the process of setting up restrictions in detail, examine the differences between the "Priority" and "Limited" profiles, and discuss the intricacies of working with guest networks. You'll learn how to create rules that will automatically apply to new devices and understand how to avoid common mistakes when configuring network interfaces.
Why do I need to limit the speed on my router?
The main goal of traffic management is to prevent situations where one device "hogs" the entire bandwidth, making it impossible for others to work. Imagine someone updating a 100GB game in the background while you're trying to have an important video meeting. Without configuration speed limits The router will process packets in the order they arrive, which will lead to lags and connection breaks.
Speed limiting is also useful for creating guest hotspots. You can provide internet access to friends or tenants, but protect yourself from abuse by setting limits on downloads or high-definition streaming. This allows you to conserve bandwidth for personal use and smart devices like CCTV cameras.
- 🚀 Ensuring the stability of online games and video calls through channel redundancy.
- 🛡️ Protect your network from overloads when multiple IoT devices are operating simultaneously.
- 👥 Fair distribution of resources among family members or office employees.
It's worth noting that proper traffic distribution extends the lifespan of your equipment, as the router's processor won't be strained to its limits while trying to handle chaotic data flows. Proper configuration QoS policy turns an ordinary router into an intelligent network control center.
⚠️ Warning: Setting speed limits too low may result in incorrect page rendering or connection timeouts, as modern websites require a certain minimum bandwidth to load scripts and ads.
Preparing for setup: logging into the web interface
Before making any changes to the network configuration, you must log in to the router's management system. Open any browser on a device connected to the network. Keenetic, and enter in the address bar my.keenetic.net or a standard IP address 192.168.1.1If you changed the default address, use it.
After entering your administrator login and password, you will be taken to the main page of the interface. KeeneticOSIt's important to ensure you're using the latest firmware version, as traffic management functionality may vary across different software branches. You can check for updates in the section System → Software update.
☑️ Check before setup
To work with advanced settings, it is recommended to switch the interface display mode to "Full" or "Advanced." This can be done at the bottom of the page or through the interface settings menu. Only in this mode will the tabs be accessible. Connection priorities and detailed settings for each client.
Setting priorities and restrictions for devices
The main speed control tool is located in the section My Networks and Wi-Fi → Client listThis displays all devices currently connected to your network, or those previously detected. You can set a custom access policy for each client.
Select the desired device from the list and click on it to open the detailed menu. In the settings section, you'll find the "Connection Priority" option. This is where the traffic distribution magic happens. The system offers several profiles, each of which affects how the router handles data packets from that client.
| Profile | Description of behavior | Recommended use |
|---|---|---|
| Ordinary | Standard traffic processing without priorities | Background devices, printers |
| Web surfing | Priority for HTTP/HTTPS requests | Tablets and smartphones for browsing |
| Online games | Maximum priority, minimum ping | Game consoles, PC gamers |
| Internet telephony | Priority for VoIP traffic | IP phones, video conferencing |
However, if your goal is precisely limit the speed, you'll need more fine-grained configuration, often available through the "Access Restriction" component or creating rules in the "Internet Filter" section. In newer versions of KeeneticOS, the QoS functionality allows you to set guaranteed bandwidth, but a hard limit (Cap) is often implemented by creating an access rule with the "Restriction" profile.
What is the "Unlimited" profile?
This profile means the device will use all available bandwidth unless it's already occupied by other higher-priority clients. Under full bandwidth conditions, these devices will be the first to feel the bottleneck.
Setting a hard limit in kilobits per second may require using the command line or having a component installed. NetFilter with advanced rules. In the graphical interface, this often appears as a slider or input field in the device profile's advanced settings.
Using a guest network to isolate traffic
If you need to temporarily provide internet access to guests, but you don’t want to bother with setting individual limits for each of their devices, the ideal solution is Guest networkThis is an isolated Wi-Fi segment that operates in parallel with the main network.
Unlike the main connection, global speed limits can be applied to the guest network at the interface level. This means that all devices connected to this SSID will share the set limit, regardless of their number. This setting is made in the section My Networks and Wi-Fi → Guest network.
Activate the guest network and go to its settings. Here you can set the network name (SSID) and password. But most importantly, in the advanced settings (often hidden under the "Advanced" or "Interface Settings" button), you can find the speed limit settings. Downlink (incoming) and Uplink (outgoing).
- 🔒 Complete isolation from devices on the main home network.
- ⏱️ Possibility to set the time interval for the network to operate.
- 📉 Global speed limit for all guests at once.
⚠️ Note: Speed limits on the guest network interface affect the combined traffic of all connected guests. If you set a limit of 1 Mbps, ten people will share that 1 Mbps, making internet access virtually unusable for everyone.
Using a guest network also allows you to apply content filtering rules to guests if the corresponding profiles are configured on the router. Safe internet (SkyDNS, Yandex.DNS, etc.).
QoS technology and bandwidth management
Abbreviation QoS (Quality of Service) refers to a set of technologies that guarantee a certain quality of service for different types of traffic. In routers Keenetic A flexible priority system has been implemented, which operates based on the analysis of packet headers.
The principle is simple: the router places high-priority packets (such as those from an online game) at the top of the transmission queue, and sends low-priority packets (such as torrents) later if the channel is congested. This doesn't directly limit the maximum speed, but it ensures that important data gets through first.
To configure QoS, go to the section Connection prioritiesHere you'll see a list of all active rules. You can create new rules by specifying:
- The source or recipient of traffic (a specific device).
- Service type (web, games, streaming video).
- Direction (download or upload).
It is important to understand the difference between guaranteed band And maximum limitKeenetic is excellent at reserving bandwidth for important tasks, but setting a hard speed "ceiling" (for example, no more than 5 Mbps) often requires the use of a mechanism Access restriction in conjunction with filtering rules.
Traffic control through Internet filtering
The most powerful tool in the arsenal KeeneticOS is a module Internet filterIt allows you to create complex rules that can not only block access but also limit data transfer speeds under certain conditions.
To create a restriction rule, go to the section Security → Internet filterCreate a new rule and select the "Restrict Access" action or a similar one if available in your firmware version. In the rule conditions, specify the device (or group of devices), the validity period, and, most importantly, the speed profile.
Some configurations use access profiles to enforce strict restrictions, allowing you to explicitly specify the maximum bit rate per second. This allows for scenarios where a child's speed is limited to a minimum during the day and then allowed full access in the evening.
Filter rules are processed in the order they appear in the list. Make sure your new restriction rule isn't overridden by a more general "Allow All" rule, which may be higher in the priority list.
Common problems and solutions
When setting up restrictions, users may encounter situations where rules are not applied or work incorrectly. This is often due to the device using static IP address, which does not match the one reserved in DHCP, or the rule is tied to a MAC address that has been changed (MAC randomization feature in modern smartphones).
Another common issue is DNS caching or the use of third-party DNS servers on the client device, which can bypass some types of filtering, although this rarely affects IP/MAC speed limits. Verify that the device is actually receiving an IP address from the router's range and is viewing it as the default gateway.
If you have set restrictions, but speed tests show the full rate, check if the router is in the "limited" mode. Hardware NAT (NAT acceleration). In some cases, hardware acceleration bypasses the processor's software limitations, and this mode must be disabled to apply software speed limits, which can reduce overall router performance on gigabit plans.
⚠️ Note: Disabling hardware acceleration (Hardware NAT) to apply software speed limits may reduce the maximum routing speed to 100-300 Mbps, depending on the router model. On plans above 100 Mbps, this may become a bottleneck.
Always check the application of rules through the built-in traffic monitor in the web interface KeeneticIt displays the actual speed in real time for each connected client, allowing you to instantly evaluate the effectiveness of your settings.
Questions and Answers (FAQ)
Is it possible to limit speed only for YouTube or TikTok?
Yes, this is possible using the "Connection Priorities" or "Internet Filter" features if the domain names or IP addresses of these services are defined in the system. However, since large services use multiple servers and CDNs, it can be difficult to reliably limit only those servers. It's easier to limit the speed for the entire device.
Will the speed setting be reset after rebooting the router?
No, all settings made through the web interface KeeneticOS, are stored in non-volatile memory. After a reboot or power surge, all restriction and priority rules will be applied automatically.
Does speed limiting on one device affect others?
There's no direct impact; each rule is individual. However, if you limit a bandwidth-hungry device, the others will gain more bandwidth because it no longer takes up 90% of the traffic. This will indirectly improve speeds for everyone else.
How do I find out the MAC address of a device to configure a rule?
The easiest way to find it is in the client list in the router's web interface. All connected devices are displayed there. You can also find the MAC address in the Wi-Fi settings on your smartphone or computer (often called the "Physical Address").
Do restrictions work if the device is connected via cable?
Yes, the rules are in Keenetic These are applied at the network interface level and are independent of the connection type. Speed limits can be applied to both Wi-Fi clients and devices connected via LAN ports or USB modems.