From mboxrd@z Thu Jan 1 00:00:00 1970 From: Damion de Soto Date: Wed, 30 Jul 2003 23:45:12 +0000 Subject: Re: [LARTC] shaping incoming with ingress Message-Id: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Stef Coene wrote: > Ok, first of all, you can only shape outgoing traffic. If you have 3 nic's > and want to shape traffic from the internet to you, this can be problem. But > you can patch the kernel so you can create a virtial imq device. And with > simple iptables commands, you can redirect all incoming packets from the > internet to this imq device. The good news is you can shape on that imq > device. I've noticed as of late, everyone saying 'you can't shape incoming traffic' but the best solution is to use the imq device. what happened to ingress /policer usage? is this not recommended anymore? I know it doesn't do as efficient job as the normal egress methods, but is imq a lot better ? when does imq become necessary instead of cbq/htb and ingress? -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Damion de Soto - Software Engineer email: damion@snapgear.com SnapGear --- ph: +61 7 3435 2809 | Custom Embedded Solutions fax: +61 7 3891 3630 | and Security Appliances web: http://www.snapgear.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/