[Firehol-support] FireQOS Use Case

[Tsaousis, Costa]

Hi all,

A tip: read this wiki page:
https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios#mapping-snat-or-masquerade-ports-for-each-organization

Read all of it (to get the idea). Your solution is probably the
section pointed by the link.

Regards,

Costa


On Sat, Aug 1, 2015 at 3:02 PM, Rudi <ooly.me at gmail.com> wrote:
> Many thanks Phil, I'll be following up on your suggestions in the coming
> days.
>
> Cheers.
>
>
>
> On Sat, Aug 1, 2015 at 3:46 PM, Phil Whineray <phil at sanewall.org> wrote:
>
>> Hi Rudi
>>
>> Just having QOS running may do enough, depending on how strictly you
>> want to control the limits. QOS will try to ensure fairness between
>> connections in a class so if your 5 users all have similar usage
>> patterns it will probably even out without worrying about destination.
>>
>> If you want to enforce strict boundaries but share the unused bandwidth
>> as you described, then you need to classify the traffic by destination.
>> Having NAT makes this more complicated but not impossible.
>>
>> On Sat, Aug 01, 2015 at 01:23:22PM +0800, Rudi wrote:
>> > Is FireQOS suited to shape traffic for NAT'd users?
>>
>> Yes, see "Case 2" of this page for your options:
>>   https://github.com/ktsaou/firehol/wiki/FireQOS-Use-Scenarios
>>
>> It should explain the options available. Where organisations are
>> talked about, you can think of individual computers just as easily.
>>
>> > FireQOS is more to shape traffic only to/from the single user machine
>> > correct?
>>
>> Not at all: it can be used that way but it's aimed at machines that
>> route. I run it on OpenWRT connecting dual LANs to my ISP with both
>> IPv4 and IPv6.
>>
>> Cheers
>> Phil
>> _______________________________________________
>> Firehol-support mailing list
>> Firehol-support at lists.firehol.org
>> http://lists.firehol.org/mailman/listinfo/firehol-support
> _______________________________________________
> Firehol-support mailing list
> Firehol-support at lists.firehol.org
> http://lists.firehol.org/mailman/listinfo/firehol-support