Re: Dynamic traffic shaping for multiple IP''s

Danie Marais
Wed, 18 Jan 2012 20:02:13 -0000

That''s exactly what I have at the moment so that''s great.  One
last question - is it possible to use simple traffic shaping in conjunction with
a transparent proxy on the firewall or will you lose per ip traffic shaping
since all web traffic is (re)generated by the proxy server?  I do simple shaping
on the web-side interface.

-----Original Message-----
From: Tom Eastep [mailto:teastep@shorewall.net]
Sent: 18 January 2012 06:40 PM
To: shorewall-users@lists.sourceforge.net
Subject: Re: [Shorewall-users] Dynamic traffic shaping for multiple
IP''s

On 01/18/2012 05:20 AM, Danie Marais wrote:
> I use Shorewall for a 20-person office and want to do the following on a
(say) 1000kbit line:
>
> - If only one person is downloading data, give him the full 1000kbit.
> - If two are downloading, give each 500kbit
> - If three then 333kbit each etc.
> - However, if two are downloading and one is only using 100kbit, give the
other one 900kbit.
>
> I know the above is oversimplified but it explains the main idea.
I''ve looked at Per IP traffic shaping but I''m not sure if it
will do the above.  The idea is that no-one can ever monopolize the bandwidth
but if there is nothing happening on the line then one person can get (almost)
all the bandwidth.
>
> The same should be done for uploads too.
>
> Any suggestions or pointers in the right direction will be highly
appreciated.
>

Just configure simple traffic shaping as described at