hi all. queueing question here ... what i have is an openbsd 5.9 firewall with one physical external interface and one physical internal interface. i have two vlans on the external interface, each connecting to a different ISP. each ISP provides different bandwidth.
in an attempt to provide a bit of qos, i've created queues and am assigning conversations to those queues based on the their simple rules (eg. pass in quick log proto tcp from <trustednets> to any port ssh queue ssh). however, the queues are created on the external physical interface, which means the queue definitions apply to both ISP connections but only properly fit one of them. how would i go about correcting this? if i create separate queues for each vlan interface to fit the different ISP connections, it seems i would have to create multiple separate (and more specific) rules for each allowed conversation. surely there is a smarter way ... suggestions are welcomed.
