# WAN egress Queues
altq on $if_ext bandwidth 970Mb hfsc queue { ext_local, ext_wan }
queue ext_local bandwidth 800Mb priority 4 hfsc(upperlimit 800Mb) {
_local_kernel, _local_data }
queue _local_kernel on $if_ext bandwidth 1% priority 6
hfsc(realtime 1%, linkshare 10%)
queue _local_data on $if_ext bandwidth 99% priority 0
hfsc(linkshare 80%)
queue ext_wan bandwidth 100Mb priority 15 hfsc(linkshare 100Mb) {
_wan_pri, _wan_int, _wan_web, _wan_dflt }
queue _wan_pri on $if_ext bandwidth 20% priority 6 qlimit 100
hfsc(realtime 20%, linkshare 20%)
queue _wan_int on $if_ext bandwidth 5% priority 5 qlimit 100
hfsc(realtime 5%, linkshare 5%)
queue _wan_web on $if_ext bandwidth 50% priority 4 qlimit 100
hfsc(realtime(10%, 1000, 1%), linkshare 50%, ecn)
queue _wan_dflt on $if_ext bandwidth 5% priority 2 qlimit 100
hfsc(realtime(10%, 1000, 1%), linkshare 5%, ecn, default)
# LAN egress Queues
altq on $if_lan bandwidth 970Mb hfsc queue { lan_local, lan_wan }
queue lan_local bandwidth 800Mb priority 4 hfsc(upperlimit 800Mb) {
_local_kernel, _local_data }
queue _local_kernel on $if_lan bandwidth 1% priority 6
hfsc(realtime 1%, linkshare 10%)
queue _local_data on $if_lan bandwidth 99% priority 0
hfsc(linkshare 80%)
queue lan_wan bandwidth 100Mb priority 15 hfsc(linkshare 100Mb) {
_wan_pri, _wan_int, _wan_web, _wan_dflt }
queue _wan_pri on $if_lan bandwidth 10% priority 6 qlimit 100
hfsc(realtime 10%, linkshare 10%)
queue _wan_int on $if_lan bandwidth 5% priority 5 qlimit 100
hfsc(realtime 5%, linkshare 5%)
queue _wan_web on $if_lan bandwidth 60% priority 4 qlimit 100
hfsc(realtime(10%, 1000, 1%), linkshare 60%, ecn)
queue _wan_dflt on $if_lan bandwidth 5% priority 2 qlimit 100
hfsc(realtime(10%, 1000, 1%), linkshare 5%, ecn, default)
Note the 'on $if_ext'
You can now write the rule;
pass quick proto { tcp } from { <ext_trusted_netsv4> } to {
<int_ssh_serversv4> } port { ssh } queue (_wan_dflt,_wan_int) set prio (2,5)
This would queue the traffic in both directions with only one rule.
NB; I use '_local_kernel' for local CARP traffic etc, and '_local_data'
for traffic which is not distined for the WAN link but other local
networks and so can run at wire speed.
And _wan_* for the wan based traffic..
Hope this helps,
Andy.
On 09/10/13 07:47, Leonardo Lombardo wrote:
Hi all,
is there a way to configure altq on multiple interfaces, sharing the same
parameters (bandwidth, priorities, etc) ?
If not, is there some other mechanism to obtain the same result ?
Thanks for any suggestion.
Leonardo