Re: using queues to limit bandwidth

2006-05-01 Thread kami petersen

Chris Cameron skrev:

On Mon, 2006-05-01 at 13:02 -0400, Chris Bullock wrote:

Can queues be used to queue overall bandwidth?  We have a project where we
will be sharing an Internet connection with another company, we will have an
IP and they will have an IP each company providing their own firewall.  I
understand that queuing is able to queue based on protocol, etc on the same
box but lets say there is a T1 shared between the companies, The company
tells us, you can have one of our IP addresses but you can only use 100k of
our bandwidth, can pf do this?  I guess this is more bandwitdh throttling
more so than queuing.
TIA,
Chris




No one mentioned it, but this'll only work in one direction. It won't
stop you from saturating the pipe with incoming traffic.



so you'd have to set up queueing on the interior interface of your 
firewall as well... tcp will throttle back to this cap, but ordering up 
a fat udp stream will always get you in trouble.


/k



Re: using queues to limit bandwidth

2006-05-01 Thread Chris Cameron
On Mon, 2006-05-01 at 13:02 -0400, Chris Bullock wrote:
> Can queues be used to queue overall bandwidth?  We have a project where we
> will be sharing an Internet connection with another company, we will have an
> IP and they will have an IP each company providing their own firewall.  I
> understand that queuing is able to queue based on protocol, etc on the same
> box but lets say there is a T1 shared between the companies, The company
> tells us, you can have one of our IP addresses but you can only use 100k of
> our bandwidth, can pf do this?  I guess this is more bandwitdh throttling
> more so than queuing.
> TIA,
> Chris
> 


No one mentioned it, but this'll only work in one direction. It won't
stop you from saturating the pipe with incoming traffic.



Re: using queues to limit bandwidth

2006-05-01 Thread Peter Blair

I forgot to mention in my previous e-mail, that if you were to
implement the scenerio outlined in your e-mail, then the other company
would have to 'trust' that you're setting up your firewall to not
exceed your 100k of bandwidth.

Just setup a single queue that caps at 100k.

On 5/1/06, Chris Bullock <[EMAIL PROTECTED]> wrote:

Can queues be used to queue overall bandwidth?  We have a project where we
will be sharing an Internet connection with another company, we will have an
IP and they will have an IP each company providing their own firewall.  I
understand that queuing is able to queue based on protocol, etc on the same
box but lets say there is a T1 shared between the companies, The company
tells us, you can have one of our IP addresses but you can only use 100k of
our bandwidth, can pf do this?  I guess this is more bandwitdh throttling
more so than queuing.
TIA,
Chris




Re: using queues to limit bandwidth

2006-05-01 Thread Jason Dixon

On May 1, 2006, at 1:02 PM, Chris Bullock wrote:

Can queues be used to queue overall bandwidth?  We have a project  
where we
will be sharing an Internet connection with another company, we  
will have an
IP and they will have an IP each company providing their own  
firewall.  I
understand that queuing is able to queue based on protocol, etc on  
the same
box but lets say there is a T1 shared between the companies, The  
company
tells us, you can have one of our IP addresses but you can only use  
100k of
our bandwidth, can pf do this?  I guess this is more bandwitdh  
throttling

more so than queuing.


Yes, CBQ works quite well.

http://www.openbsd.org/faq/pf/queueing.html#cbq

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: using queues to limit bandwidth

2006-05-01 Thread Peter Blair

ALTQ Should do the trick:

http://www.openbsd.org/faq/pf/queueing.html

On 5/1/06, Chris Bullock <[EMAIL PROTECTED]> wrote:

Can queues be used to queue overall bandwidth?  We have a project where we
will be sharing an Internet connection with another company, we will have an
IP and they will have an IP each company providing their own firewall.  I
understand that queuing is able to queue based on protocol, etc on the same
box but lets say there is a T1 shared between the companies, The company
tells us, you can have one of our IP addresses but you can only use 100k of
our bandwidth, can pf do this?  I guess this is more bandwitdh throttling
more so than queuing.
TIA,
Chris




using queues to limit bandwidth

2006-05-01 Thread Chris Bullock
Can queues be used to queue overall bandwidth?  We have a project where we
will be sharing an Internet connection with another company, we will have an
IP and they will have an IP each company providing their own firewall.  I
understand that queuing is able to queue based on protocol, etc on the same
box but lets say there is a T1 shared between the companies, The company
tells us, you can have one of our IP addresses but you can only use 100k of
our bandwidth, can pf do this?  I guess this is more bandwitdh throttling
more so than queuing.
TIA,
Chris