From owner-freebsd-pf@FreeBSD.ORG Tue Dec 2 07:56:38 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C32401065673 for ; Tue, 2 Dec 2008 07:56:38 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from mail34.syd.optusnet.com.au (mail34.syd.optusnet.com.au [211.29.133.218]) by mx1.freebsd.org (Postfix) with ESMTP id 51F0F8FC1D for ; Tue, 2 Dec 2008 07:56:37 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from server.vk2pj.dyndns.org (c122-106-215-175.belrs3.nsw.optusnet.com.au [122.106.215.175]) by mail34.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id mB27uYZS027849 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 2 Dec 2008 18:56:35 +1100 X-Bogosity: Ham, spamicity=0.000000 Received: from server.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1]) by server.vk2pj.dyndns.org (8.14.3/8.14.3) with ESMTP id mB27uYGN058390; Tue, 2 Dec 2008 18:56:34 +1100 (EST) (envelope-from peter@server.vk2pj.dyndns.org) Received: (from peter@localhost) by server.vk2pj.dyndns.org (8.14.3/8.14.3/Submit) id mB27uYP6058389; Tue, 2 Dec 2008 18:56:34 +1100 (EST) (envelope-from peter) Date: Tue, 2 Dec 2008 18:56:34 +1100 From: Peter Jeremy To: "Sam Fourman Jr." Message-ID: <20081202075634.GT51761@server.vk2pj.dyndns.org> References: <20081124180411.0b065be5@wolwerine> <705757.42117.qm@web38504.mail.mud.yahoo.com> <11167f520812011508u46b04e7dmb1d5d22675dc778d@mail.gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="lKbk9CFItQTD29wm" Content-Disposition: inline In-Reply-To: <11167f520812011508u46b04e7dmb1d5d22675dc778d@mail.gmail.com> X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc User-Agent: Mutt/1.5.18 (2008-05-17) Cc: freebsd-isp@freebsd.org, freebsd-pf@freebsd.org Subject: Re: PF + ALTQ - Bandwidth per customer X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Dec 2008 07:56:38 -0000 --lKbk9CFItQTD29wm Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2008-Dec-01 17:08:40 -0600, "Sam Fourman Jr." wrote: >So I would like to hear some ideas on how we could use FreeBSD or any othe= r BSD >to limit bandwidth per customer( say one customer (with root access) >per server ) That description sounds like it simplifies to "limit bandwidth based on IP address" - which is fairly trivial for ipfw+dummynet or pf+altq. ipfw+dummynet can also filter on uid/gid but I believe there are some race conditions in that code --=20 Peter Jeremy Please excuse any delays as the result of my ISP's inability to implement an MTA that is either RFC2821-compliant or matches their claimed behaviour. --lKbk9CFItQTD29wm Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) iEYEARECAAYFAkk06jEACgkQ/opHv/APuIchZwCeIe0vTxM1Qi4urDU7QzrgTqKv BSQAoLeX4P6ASr4eJ6GKQ4TLvxCHVTtj =LXyD -----END PGP SIGNATURE----- --lKbk9CFItQTD29wm--