0

I want to shape traffic in such way, that no specific user could exhaust WAN connection that much so other users would be affected. I have ISP link with 100Mbits/s bandwidth and sometimes some users can exhaust it when they download something from internet or via vpn from smb in remote office. So, I came out with following rules:

  #traffic shaping for office users 
#$ipfw pipe 1 config bw 100Mbits/s
#$ipfw queue 1 config pipe 1 weight 2 mask dst-ip 0xffffffff

#traffic from internet to local subnets (wi-fi and wire) going to the queue
#$ipfw add queue 1 ip from any to { 172.30.0.0/24 or 172.30.1.0/24 } in recv em0
# the same thing but with lower weight for guest wi-fi
#$ipfw add queue 1 ip from any to 192.168.0.0/23 in recv em0 

#traffic from remote office via vpn going to the queue 
#$ipfw add queue 1 ip from any to any in recv tun101
#$ipfw add queue 1 ip from any to any in recv tun100

So, the thing is, that I don't exactly understand following:

  1. What is the difference between 0xffffffff and 0x00000000 and what should be used for per ip fair shaping ?
  2. What is the size of queue should be sеt for pipe, because as I understand this is quite important?
  3. Maybe there is a more simple way to achieve this task?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.