Re: FireQOS Use Case
"Tsaousis, Costa" <[email protected]> Sat, 1 Aug 2015 17:17:35 +0300
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CANL+VpbxeztYNABqunZNpr4xvmp2mcRC1-iGe4wt1cd78NBWgw@mail.gmail.com> |
Hi all, A tip: read this wiki page: https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios#mapping-snat-or-masquerade-ports-for-each-organization Read all of it (to get the idea). Your solution is probably the section pointed by the link. Regards, Costa On Sat, Aug 1, 2015 at 3:02 PM, Rudi <[email protected]> wrote: > Many thanks Phil, I'll be following up on your suggestions in the coming > days. > > Cheers. > > > > On Sat, Aug 1, 2015 at 3:46 PM, Phil Whineray <[email protected]> wrote: > >> Hi Rudi >> >> Just having QOS running may do enough, depending on how strictly you >> want to control the limits. QOS will try to ensure fairness between >> connections in a class so if your 5 users all have similar usage >> patterns it will probably even out without worrying about destination. >> >> If you want to enforce strict boundaries but share the unused bandwidth >> as you described, then you need to classify the traffic by destination. >> Having NAT makes this more complicated but not impossible. >> >> On Sat, Aug 01, 2015 at 01:23:22PM +0800, Rudi wrote: >> > Is FireQOS suited to shape traffic for NAT'd users? >> >> Yes, see "Case 2" of this page for your options: >> https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios >> >> It should explain the options available. Where organisations are >> talked about, you can think of individual computers just as easily. >> >> > FireQOS is more to shape traffic only to/from the single user machine >> > correct? >> >> Not at all: it can be used that way but it's aimed at machines that >> route. I run it on OpenWRT connecting dual LANs to my ISP with both >> IPv4 and IPv6. >> >> Cheers >> Phil >> _______________________________________________ >> Firehol-support mailing list >> [email protected] >> http://lists.firehol.org/mailman/listinfo/firehol-support > _______________________________________________ > Firehol-support mailing list > [email protected] > http://lists.firehol.org/mailman/listinfo/firehol-support _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support