Re: FireQOS Use Case

"Tsaousis, Costa" <[email protected]> Sat, 1 Aug 2015 17:17:35 +0300
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CANL+VpbxeztYNABqunZNpr4xvmp2mcRC1-iGe4wt1cd78NBWgw@mail.gmail.com>
Hi all,

A tip: read this wiki page:
https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios#mapping-snat-or-masquerade-ports-for-each-organization

Read all of it (to get the idea). Your solution is probably the
section pointed by the link.

Regards,

Costa


On Sat, Aug 1, 2015 at 3:02 PM, Rudi <[email protected]> wrote:
> Many thanks Phil, I'll be following up on your suggestions in the coming
> days.
>
> Cheers.
>
>
>
> On Sat, Aug 1, 2015 at 3:46 PM, Phil Whineray <[email protected]> wrote:
>
>> Hi Rudi
>>
>> Just having QOS running may do enough, depending on how strictly you
>> want to control the limits. QOS will try to ensure fairness between
>> connections in a class so if your 5 users all have similar usage
>> patterns it will probably even out without worrying about destination.
>>
>> If you want to enforce strict boundaries but share the unused bandwidth
>> as you described, then you need to classify the traffic by destination.
>> Having NAT makes this more complicated but not impossible.
>>
>> On Sat, Aug 01, 2015 at 01:23:22PM +0800, Rudi wrote:
>> > Is FireQOS suited to shape traffic for NAT'd users?
>>
>> Yes, see "Case 2" of this page for your options:
>>   https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios
>>
>> It should explain the options available. Where organisations are
>> talked about, you can think of individual computers just as easily.
>>
>> > FireQOS is more to shape traffic only to/from the single user machine
>> > correct?
>>
>> Not at all: it can be used that way but it's aimed at machines that
>> route. I run it on OpenWRT connecting dual LANs to my ISP with both
>> IPv4 and IPv6.
>>
>> Cheers
>> Phil
>> _______________________________________________
>> Firehol-support mailing list
>> [email protected]
>> http://lists.firehol.org/mailman/listinfo/firehol-support
> _______________________________________________
> Firehol-support mailing list
> [email protected]
> http://lists.firehol.org/mailman/listinfo/firehol-support
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support