Ingress traffic shaping

Spenst, Aleksej Aleksej.Spenst at harman.com
Fri May 21 06:38:45 UTC 2010


 

-----Ursprüngliche Nachricht-----
Von: Raymond
Gesendet: Donnerstag, 20. Mai 2010 16:29
An: Spenst, Aleksej
Betreff: Re: Ingress traffic shaping

On 5/20/2010 04:18, Spenst, Aleksej wrote:
> If I understand it correctly, ingress traffic shaping is not possible with pf/altq.
> Are there any tricks to do it?
>    

Yes.  Inbound traffic can be queued as you discovered by setting up a queue on the internal NIC.  You can split off a separate full speed queue for traffic originating from the local host if you don't want local network traffic to be slowed as well.

The problem is that such throttling is largely fruitless.  The traffic has already been sent by the remote end, and dropping the packet simply means the remote end will have to send it again, consuming even more bandwidth.  You are simply hoping the remote end follows proper procedure and throttles itself as it starts getting dropped packets.


More information about the freebsd-pf mailing list