As mentioned earlier in the chapter, Layer 7 (deep packet inspection) traffic shaping has been removed from pfSense's built-in traffic shaper, and it is now recommended that you use a third-party solution such as Snort for such purposes. Configuring Snort can be somewhat involved, but if your traffic shaping requirements include some form of deep packet inspection, Snort can do the job quite well.