Re: [Masq] Re: NAT and MASQ on the same interface

[George Galtchin]

Hello, I have one question about traffic shaping, > Joerg Peters <[EMAIL PROTECTED]> wrote: > > > And is it possible to throttle the throuput to a max like 20 kbytes > > per second or something else ? > > I have been wondering the same thing, so I did some research.  One > method is to run a HTTP server that knows how to throttle or limit the > traffic it sends out.  I tried one called "thttpd" and it does the job > very well. > > Another possibility is to use one of the "limit" matches available with > iptables.  The default "limit" match can only limit on the NUMBER of > packets, not the number of BYTES in the packets, so it is probably not > suitable.  My distribution also has an "iplimit" match, which limits the > number of concurrent connections, again, not exactly what you are > looking for. > > Another thing you can try is the "Traffic Shaper" module, outside of > iptables.  This is basically a virtual IP device that you configure, and > you use an alternate routing method like "iproute2" to cause packets > matching your criteria to funnel through the shaper device, and the > shaper drops packets that try to go through too fast.  Yes, it's very > complicated, and I have not set it up.  But it appears that iptables > does not have the feature you're looking for, here. > Can you suggest where to read about it? Regards, Geo