Date: Sun, 28 Nov 1999 15:49:49 +0800 From: "aLan @ FIL.NET" <filnet@fil.net> To: FreeBSD Questions <questions@FreeBSD.ORG> Subject: Re: After Proxy Bandwidth Management Message-ID: <3840DE9D.10F1B38@fil.net>
next in thread | raw e-mail | index | archive | help
What I am really trying to do is limit the border bandwidth
per subscriber (after the proxy). Therefore, I am making
higher and lower quality connections (of course at different
prices!) During our peak times, every circuit is over
loaded... Some people are willing to pay for higher
quality...
If I put dummynet right behind the router, I can't see how
it will help me as it will limit the bandwidth based on the
Proxy's address, instead of the originator (mainly cafes
with 6-20 computers). I want to limit EACH cafe based on
the bandwidth used AFTER (on the border side of) our proxy.
Maybe I am just missing something...
This is what it looks like so far:
128-Kbps
|
Router (this allows F/W filter, but not
redirect)
|
GW/IPFilter (to redirect port 80 to proxy)
|
Servers - HUB - Proxy
|
Portmaster
|
Cafe
What I am thinking of would look like this:
128-Kbps
|
Router (w/ F/W filter)
|
Servers - HUB - FNS Proxy
|
IPFW/natd/dummynet
|
Portmaster
|
Cafe
Proxy
Rules:
1) The cafe proxy (one global IP address) would do Nat
translation to RFC 1918 addresses. All other addresses are
global.
2) The Cafe Proxy would address the FNS proxy as sibling on
UDP port 3128.
3) The Cafe Proxy would address the FNS proxy as a parent on
TCP port 3130.
4) Natd would redirect all port 80 request to the FNS Proxy.
5) dummynet would allow a 10Mbps pipe to the Servers IP
addresses.
6) dummynet would allow a 10Mbps pipe to the FNS Proxy UDP
port 3128.
7) dummynet would allow a 6Kbps pipe for all other requests.
8) "Servers" include local HTTP, FTP, DNS, Email and Radius.
Flow:
1) A cafe work station makes a request to the Cafe Proxy.
2) If available, cafe Proxy servers request.
3) If unavailable on Cafe Proxy AND available on FNS Proxy,
FNS Proxy servers request at max. speed as sibling on UDP
port 3128.
4) If unavailable on FNS Proxy (as UDP sibling), Cafe Proxy
makes requests to FNS proxy as parent on TCP port 3130.
This is limited to the "assigned speed" of 6Kbps. The
request is sent to the "outside" border while dummynet
restricts the bandwidth to 6Kbps. The return is stored in
both the FNS Proxy and the Cafe Proxy.
5) The Cafe would have "unrestricted access" (up to 10Mbps)
to all Servers for downloading local DNS, FTP, web pages,
and email.
Questions...
Can I assign a proxy as both the parent and sibling of the
cafe proxy?
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3840DE9D.10F1B38>