Shorewall users - Nov 2004 - HTB/CBQ - shorewall and bridge

This is my situation :

FTP/Webserver ------|
Mailserver ---------|-------Cisco 827 RTR-----Internet
DB App. server -----|

I want to do the following :

FTP/Webserver ------|
Mailserver ---------|------BRIDGE------Cisco 827 RTR-----Internet
DB App. server -----|

The internet connection is 3mbit/384kbit ADSL connection, with 1 fixed
address. The cisco router is acting as a router with NAT. Some ports
are forwarded to internal addresses (3 servers, web, mail, App.). the
problem we are experiencing is the same problem that Tom had when he
was hosting shorewall.net at home.

When people mail large files or ppl on the internet download large
files from the ftp/web server, our application server (db app.) does
not get enough available bandwidth, and ppl who us it (over the
internet) start complaining. Sometimes the entire app is not useable
anymore because of line congestion.

I would like to put a stop to this, by using some kind of QOS.
The DB App should get 200kbit of the upload available.
FTP/Webserver should get priority over E-mail.
E-mail should get lowest priority (ie. rest bandwidth).

Good readers have noticed that I am mixing the terms x bandwidth and x
priority. Is it possible to mix ''priorty'' and
''bandwidth'' rules? Can a
bridge do this, or do I need something like proxy ARP? Maybe if I
understand what Proxy ARP does, I could answer this myself, bu tI
intend to figure this out if I need it. What technique would you advise
to accomplish what I intend to do? I''m not asking to give step by step
guidelines, just general techniques on how to do this.

Thanks a lot, for support and the great product.

Pieterjan Heyse
 
Scheppersintituut Wetteren
Cooppallaan 128
9230 Wetteren 
Tel: 09 3692072
Fax: 09 3661348
mailto:pieterjan.heyse@scheppers-wetteren.be

On Tue, 2004-11-23 at 12:54 +0100, Pieterjan Heyse wrote:
> 
> I would like to put a stop to this, by using some kind of QOS.
> The DB App should get 200kbit of the upload available.
> FTP/Webserver should get priority over E-mail.
> E-mail should get lowest priority (ie. rest bandwidth).
> 
> Good readers have noticed that I am mixing the terms x bandwidth and x
> priority. Is it possible to mix ''priorty'' and
''bandwidth'' rules?
HTB classes have both priority and bandwidth attributes.
> Can a
> bridge do this, or do I need something like proxy ARP? Maybe if I
> understand what Proxy ARP does, I could answer this myself, bu tI
> intend to figure this out if I need it.
Proxy ARP is just an extension of routing. So when you use Proxy ARP,
you have a Router that can transparently forward unicast traffic within
a network. http://shorewall.net/ProxyARP.htm attempts to make that
clear.

I would think that you could configure HTB on a bridge but I haven''t
personally tried it. Proxy ARP will definitely work in your environment
if you have no to need to forward broadcast traffic between your servers
and the Cisco.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key