FreeBSD Traffic Shaping

[Giorgos Keramidas]

On Wed, 2 Apr 2008 11:30:44 +0200 (CEST), Wojciech Puchar <wojtek at wojtek.tensor.gdynia.pl> wrote:
>> The vast majority of people out there have asymmetrical bandwidth
>> limiting needs - that is, they have a pipe to the Internet and have a
>> lot more data coming from the Internet to them, than data going from
>> them to the Internet.  Their desire is to somehow make it so that
>> certain kinds of incoming data meeting certain criteria are limited.
>> Their problem is that since they don't have control of the end
>> sending the data to them, they can't do this.
>
> but you ROUGHLY can do this with ipfw.
> by limiting at your end - the other end will slow down.

Unless the sending endpoint just ignores your limited incoming pipe
characteristics and keeps flooding you with DNS or ICMP requests, until
you scream for help.

> but of course in case of say ping flood or similar things you can't

Bingo.  That's precisely one of the things Ted meant, when he wrote that
`it cannot be done properly, unless you have dedicated T1 circuits whose
endpoints *are* under your control' :-)