- block windows update by returning DNS query for microsoft update endpoints as NXDOMAIN.
- use a captive portal to limit user session duration, so that unattended devices won't consume bandwidth.
- with freebsd dummynet, pfSense can share bandwidth equally among users. It can also share bandwidth by weight among groups. It helps.
- inside Arctic circle, the geosynchronous satellites are very low on the horizon and were blocked frequently when ship turns. I was able to read the ship's gyro and available satellites from VSAT controller and generate a plot to show the satellite blockage. It was so popular that everyone is using it to forecast next satellite online.