[LARTC] IP Masquerade and bandwidth management

[LARTC] IP Masquerade and bandwidth management

[STiNG of DEATH]

Hi all.

Sorry for asking such a simple question, but if I had a LAN of machines
with private IP addresses (192.168.0.x), a cable connection, and a Linux
machine doing NAT using iptables, what would be the best way of going
about setting bandwidth limits for certain machines on the LAN?

I assume that packets would have to be marked as they were forwarded by
netfilter (the iptables forwarding table) based on their
source/destination inside the LAN and then a set of class based
bandwidth management rules as per section 9 of the Advanced Routing
HOWTO. Is this the correct approach?

Also, this is probably a bit obscure, but is it possible to discriminate
between the type of data being carried by a protocol when doing
bandwidth management? For example, giving HTML files transferred over
http a larger share of bandwidth than, say, MP3 files over the same
protocol? Obviously this would involve sending all traffic through some
kind of proxy which would then determine which connections were carrying
what kind of file. This probably sounds quite absurd, but is it
something that has ever been considered?

Thanks for your time. Great document.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/