[LARTC] bypassing qdisc for some traffic

Marco Berizzi pupilla at hotmail.com
Wed Nov 15 16:21:22 CET 2006


Hello everybody.
I would like to enable QoS on the internal firewall NIC
(eth2) to prevent bandwidth saturation from ftp downloads
(for example). This is my firewall schema.

                       ___ private network (100bit/s FD)
                      /
                     /     /\
                  | /     //\\
                  |/       ||
                  |eth2    \\
                  |         \\    traffic flow from dmz
            +-----+-----+    \\    to private network
            |           |     ||   (from eth1 to eth2)
            |   linux   |     ||
            |   router  |
            |     &     +--eth1------DMZ (100bit/s FD)
            |   Squid   |
            |           |
            +-----+-----+
                  |
                  |eth0 (HDSL 2mbit/s)
                  |
             +--------+
             |   ISP  |
             | router |
             |        |
             +--------+

Problem: I don't want to limit traffic from eth1 to
eth2. Is there a clean way to bypass the qdisc for
certain kind of traffic (all traffic from eth1)?




More information about the LARTC mailing list