# WAN egress Queues
altq on $if_ext bandwidth 970Mb hfsc queue { ext_local, ext_wan }
queue ext_local bandwidth 800Mb priority 4 hfsc(upperlimit 800Mb) { _local_kernel, _local_data } queue _local_kernel on $if_ext bandwidth 1% priority 6 hfsc(realtime 1%, linkshare 10%) queue _local_data on $if_ext bandwidth 99% priority 0 hfsc(linkshare 80%) queue ext_wan bandwidth 100Mb priority 15 hfsc(linkshare 100Mb) { _wan_pri, _wan_int, _wan_web, _wan_dflt } queue _wan_pri on $if_ext bandwidth 20% priority 6 qlimit 100 hfsc(realtime 20%, linkshare 20%) queue _wan_int on $if_ext bandwidth 5% priority 5 qlimit 100 hfsc(realtime 5%, linkshare 5%) queue _wan_web on $if_ext bandwidth 50% priority 4 qlimit 100 hfsc(realtime(10%, 1000, 1%), linkshare 50%, ecn) queue _wan_dflt on $if_ext bandwidth 5% priority 2 qlimit 100 hfsc(realtime(10%, 1000, 1%), linkshare 5%, ecn, default)
# LAN egress Queues
altq on $if_lan bandwidth 970Mb hfsc queue { lan_local, lan_wan }
queue lan_local bandwidth 800Mb priority 4 hfsc(upperlimit 800Mb) { _local_kernel, _local_data } queue _local_kernel on $if_lan bandwidth 1% priority 6 hfsc(realtime 1%, linkshare 10%) queue _local_data on $if_lan bandwidth 99% priority 0 hfsc(linkshare 80%) queue lan_wan bandwidth 100Mb priority 15 hfsc(linkshare 100Mb) { _wan_pri, _wan_int, _wan_web, _wan_dflt } queue _wan_pri on $if_lan bandwidth 10% priority 6 qlimit 100 hfsc(realtime 10%, linkshare 10%) queue _wan_int on $if_lan bandwidth 5% priority 5 qlimit 100 hfsc(realtime 5%, linkshare 5%) queue _wan_web on $if_lan bandwidth 60% priority 4 qlimit 100 hfsc(realtime(10%, 1000, 1%), linkshare 60%, ecn) queue _wan_dflt on $if_lan bandwidth 5% priority 2 qlimit 100 hfsc(realtime(10%, 1000, 1%), linkshare 5%, ecn, default)

Note the 'on $if_ext'

You can now write the rule;

pass quick proto { tcp } from { <ext_trusted_netsv4> } to { <int_ssh_serversv4> } port { ssh } queue (_wan_dflt,_wan_int) set prio (2,5)

This would queue the traffic in both directions with only one rule.

NB; I use '_local_kernel' for local CARP traffic etc, and '_local_data' for traffic which is not distined for the WAN link but other local networks and so can run at wire speed.
And _wan_* for the wan based traffic..

Hope this helps,
Andy.


On 09/10/13 07:47, Leonardo Lombardo wrote:
Hi all,

is there a way to configure altq on multiple interfaces, sharing the same
parameters (bandwidth, priorities, etc) ?

If not, is there some other mechanism to obtain the same result ?

Thanks for any suggestion.

Leonardo

Reply via email to