I'd like to shape my network traffic according to the following rules:
- All traffic from one specific IP has lowest priority
- All HTTPS traffic shall have medium priority
- All SSH traffic shall have highest priority
I'm using Shorewall on my Linux/Debian router. The external interface is eth1, the internal interface is eth0. The specific IP 192.168.10.3 is the only client on virtual interface eth0:0.
... TC_ENABLED=Simple ...
#INTERFACE TYPE IN-BANDWIDTH OUT-BANDWIDTH eth1 External 0 1000kbit
#BAND PROTO PORT(S) ADDRESS INTERFACE HELPER 3 - - 192.168.10.3 - - # prioritize ssh connections 1 TCP 22 - - - # drop https connections 2 TCP 443 - - -
But still any leaching https traffic (like streaming services, automatic updates, etc) from 192.168.10.3 makes SSH connections unusable.
I'd like to restrict/limit traffic to/from 192.168.10.0/24 in either direction, but outgoing would be great in first place as this mainly seems to block my SSH connections.