PF + ALTQ - Bandwidth per customer

[David Roseman]

--- On Mon, 11/24/08, Marcello Barreto <marcello at linconet.com.br> wrote:

> From: Marcello Barreto <marcello at linconet.com.br>
> Subject: PF + ALTQ - Bandwidth per customer
> To: freebsd-pf at freebsd.org, freebsd-isp at freebsd.org
> Date: Monday, November 24, 2008, 4:04 PM
> Hello Folks,
> 	I believe you have heard this several times, but I'm
> new to FreeBSD and i'm trying to change my bandwidth
> control from Linux (iptables + TC + iproute) to Freebsd (PF
> + ALTQ).
> 	I read about PF and I was very interested on it, but I
> want to limit the bandwidth (Download and Upload) from each
> customer behind a router (Obviously, FreeBSD with PF.)..
> There are several networks and a lot of customers, and with
> my rules, only what I got was each customer sharing the same
> queue...
> 
> 	There are my rules:
> altq on $external cbq queue {def_up, def_up300, def_up450,
> def_up600, def_up1000}
> altq on $internal cbq queue {def_down, def_down300,
> def_down450, def_down600, def_down1000}
> 
> queue def_up bandwidth 10% cbq(default)
> queue def_down bandwidth 10% cbq(default)
> 
> queue def_up300 bandwidth 128Kb cbq(red)
> queue def_up450 bandwidth 200Kb cbq(red)
> queue def_up600 bandwidth 300Kb cbq(red)
> queue def_up1000 bandwidth 500Kb cbq(red)
> 
> queue def_down300 bandwidth 300Kb cbq(red)
> queue def_down450 bandwidth 450Kb cbq(red)
> queue def_down600 bandwidth 600Kb cbq(red)
> queue def_down1000 bandwidth 1024Kb cbq(red)
> 
> 
> pass in quick inet proto {tcp, udp} from <mylocalnet>
> to any queue def_down300
> pass out quick inet proto {tcp, udp} from
> <mylocalnet> to any queue def_up300
> 

You should consider a commercial product rather than relying on
old and somewhat unreliable technology. We've been able to squeeze a 
lot more customers onto our network for a $3500. investment. It paid for
itself in 2 months. We have a dual-core 2.33Ghz system passing 95Mb/s
with 12000 rules in place and it runs at about 10%. The latest version is
truly amazing.

http://www.etinc.com


Regards,

David