There's a provider-friendly mpd out there which I'm planning to
integrate into pfsense. It's compatible with mpd, but has some ISP-grade
features included.
this sounds good, am i guessing this is the first step. is there any
areas that you think i might be able to assist you.
Yes, I'm doing some work on this side already.
i felt that the issue with altq and queues qas you need a new parent
queue each time you add a new user this makes it far more complicated
than the dummynet method where you can still have differnet classes
I'm under the impression that pfsense uses the hsfc classifier. In an
ISP grade server you would reserve more resources to higher-paying
customers by using different classes. Then in each class the customers
would be able to use their allocated bandwidth without interference from
customers in the lower or higher classes. Traffic will be borrowed only
if one class is not using it's resources. You would have a 2 level
limiter, where each ng channel is limited to the maximum up/down rate of
the customer and then a second limiter where you allocate more resources
where needed.
Example:
5 customers with 640k contract
5 customers with 2M contract
If every customer is equal to the others, they will all go at the same
speed, but if you put the 10 customers in 1 class and the 5 customers in
another class and then give different speeds to each of them you'll be
able to keep the 640k customers at say 500k and the 2Mega customers at
say 1.5M.
Hope this explanation makes sense.
well my knowledge here is somewhat useful as our pactical experiance
with pfsense is from 0.20
This is good to know ;-)
i was under the understanding that altq did not work well with multiple
interfaces or is this just an issue with the pfsense implementation
I have no idea. My guess is that you need the max speed limiter on ng
and then a set of queues on the "wan" interface. Perhaps some packet
tagging can take place so that packets go to their queue.
this is the primary area that i would like to see worked on the
termination of aaa well is a real enterprise class thing and pfsense is
so close with ipsec openvpn and pppoe and pptp terminations intergrated
well it would be fantastic.
One more thing will be needed for full AAA and this is a port of the
bpfinet and tcp_mss modules from bsd5 to 6. I'm not fluent enough with
the bsd kernel to do it myself....
Btw all docs can be found here: http://www.foggy.ru/soft/mpd/
Paul.
