All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Leigh Waldie" <lartc@thisisnota.co.uk>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Proxy question
Date: Wed, 02 Jul 2003 13:42:57 +0000	[thread overview]
Message-ID: <marc-lartc-105715349404686@msgid-missing> (raw)
In-Reply-To: <marc-lartc-105713412720634@msgid-missing>

Why not change your topology so that you have

Firewall----------------->Shaper-------------->Proxy------------->Internet

This way you have more control over the traffic. Admittedly, you are not truly shaping
the total bandwidth available to you (some of the traffic will be returning to your
clients from the proxy without ever going out to the internet) but maybe with some
tweaking of the traffic shaping you can allow for this ?

Leigh

>  Hell everybody,
>  Yesterday I faced a problem with the shaper I use. Here's my topology
> and I'll describe the problem later after the topology.
>
>
>   10.0.1.0 /24                   10.0.1.100       eth0
> eth1    eth0 10.0.1.1  eth1
>  +-------------+               +-------------+     +------------------+
>       +--------------+
>  |  Internal   |               |             |     | Traffic shaper   |
>       |              |
>  |  Network    |-------------->| Squid proxy |---->|     Bridge
> |------>| Firewall     |
>  |             |               |             |     |                  |
>       |              |
>  +-------------+               +-------------+     +------------------+
>       +--------------+
>
>  Well this is the http and ftp traffic flow on my netwrok. Some of my
> users used to download huge files from the web.
>  Is there any way to slow down specific IP addresses even if they conect
> through the proxy ??
>  For example I want to slow down the requests made from 10.0.1.51 but
> only that host. If I apply a filter for that IP it does not make any
> sense cause in fact the proxy is making the connection for that host.
>  Has anybody else faced this problem ?
>  Any ideas or suggestions ?
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

  parent reply	other threads:[~2003-07-02 13:42 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-07-02  8:18 [LARTC] Proxy question Σταμάτης Κεκές
2003-07-02 11:41 ` Radu-Mihail Obada
2003-07-02 11:58 ` ???????? ?????
2003-07-02 12:43 ` Chijioke Kalu
2003-07-02 13:42 ` Leigh Waldie [this message]
2003-07-02 14:19 ` ???????? ?????
2003-07-02 15:16 ` Leigh Waldie
2003-07-02 15:28 ` ???????? ?????

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-105715349404686@msgid-missing \
    --to=lartc@thisisnota.co.uk \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.