I had similar problem on a ship with many users share a 2M VSAT Internet. Few tricks made Internet less painful: - block windows update by returning DNS query

I had similar problem on a ship with many users share a 2M VSAT Internet. Few tricks made Internet less painful: - block windows update by returning DNS query for microsoft update endpoints as NXDOMAIN. - use a captive portal to limit user session duration, so that unattended devices won't consume bandwidth. - with freebsd dummynet, pfSense can share bandwidth equally among users. It can also share bandwidth by weight among groups. It helps. - inside Arctic circle, the geosynchronous satellites are very low on the horizon and were blocked frequently when ship turns. I was able to read the ship's gyro and available satellites from VSAT controller and generate a plot to show the satellite blockage. It was so popular that everyone is using it to forecast next satellite online.