Traffic shaping incomming traffic for all vlans

Radek Krejča radek.krejca at starnet.cz
Thu May 19 20:16:25 UTC 2016


on $ext_if proto { tcp, udp } from 192.168.52.0/24
> Why?
Is there any nat rule?

>
> And second problem - how to set up (on which interface) altq queues?
You should use outgoing interface.


Hello,
there is relevant part of my pf.conf

ext_if          =       "ext0"
int_if          =       "int0"

scrub all fragment reassemble no-df

altq on $ext_if cbq bandwidth 1Gb queue { \
    pokus,          \
    pokus_default        \
}

queue pokus bandwidth 10Mb cbq (red)
queue pokus_default bandwidth 600Mb cbq (default, borrow, red)

nat on $ext_if from "192.168.150.0/24"     -> $ext_addr

# This is working rule
#block quick proto { tcp, udp } from 192.168.52.0/24

# This is not working
pass in quick on $ext_if from 192.168.52.0/24 queue pokus

# This doesnt match to
# block quick on $ext_if proto { tcp, udp } from 192.168.52.0/24

On this BSD box are 74 vlans on int_if and I need to shape traffic for all of them.

Thank you very much.
Radek


More information about the freebsd-pf mailing list