Hello everybody.
I would like to enable QoS on the internal firewall NIC
(eth2) to prevent bandwidth saturation from ftp downloads
(for example). This is my firewall schema.
___ private network (100bit/s FD)
/
/ /\
| / //\\
|/ ||
|eth2 \\
| \\ traffic flow from dmz
+-----+-----+ \\ to private network
| | || (from eth1 to eth2)
| linux | ||
| router |
| & +--eth1------DMZ (100bit/s FD)
| Squid |
| |
+-----+-----+
|
|eth0 (HDSL 2mbit/s)
|
+--------+
| ISP |
| router |
| |
+--------+
Problem: I don''t want to limit traffic from eth1 to
eth2. Is there a clean way to bypass the qdisc for
certain kind of traffic (all traffic from eth1)?
> Problem: I don''t want to limit traffic from eth1 to > eth2. Is there a clean way to bypass the qdisc for > certain kind of traffic (all traffic from eth1)?You can create a 100mbit root class 1: rate 100mbit default 11, containing two subclasses: 1:10 rate 2mbit and 1:11 rate 98mbit ceil 100mbit. Use iptables to mark all traffic coming from eth0 to go to 1:10 ... Daniel