1. Your topology: On the "inside" lan, are you hosting clients or
service? So is this an outside-to-inside -or- an inside-to-outside
problem?
2. altq queue-type priq effectively does what your asking -- if voip
traffic is allocated to priority 6, then nothing flows from queues 5, 4,
3, 2, and 1 while the q6 "bucket is wet."
I run altq priq on my voip/sip/asterisk setups with priority 7 being
tos, 6 being voip, 5 being vpn and then general traffic at 1 and bulk
stuff at 0.
My VOIP is NEVER affected by anything else going on and works
flawlessly. I, therefore, don't understand why you'd need to or want to
go to further extreme configurations.
As for some of the other stuff raised,
use a table
table <VoipSrvrProviders> const \
{did.voicenetwork.ca. stun.voicenetwork.ca.}
May or may not need the "static-port" modifier
nat log on outside inet proto udp \
from <SipClients> to <VoipSrvrProviders> \
-> (outside:0) static-port
use altq priq
altq on outisde priq bandwidth 825Kb queue { Q0, Q1, Q4, Q5VPN, Q6VOIP,
Q7 }
queue Q7 priority 7
queue Q6VOIP priority 6
queue Q5VPN priority 5
queue Q4 priority 4
queue Q1 priority 1 priq(default)
queue Q0 priority 0
If your case is an outside-to-inside scenario, then reverse the
directions, i.e. use either an inside-edge nat or a rdr instead.
/Scott
-----Original Message-----
From: Jeff Santos <[EMAIL PROTECTED]>
To: misc@openbsd.org
Subject: brute force voip QoS
Date: Wed, 23 Jan 2008 09:28:09 -0500
Delivered-To: [EMAIL PROTECTED]
Hi,
I would like to know if this is possible and how, regardless of what
happenned with other applications.
I would like to setup PF so that, whenever an initial voip flow was
detetcted, all other non relevant traffic would be blocked, and normal
packet flow being restored only after some voip idleness be detected.
Can it be done? Can someone give some ideas of how?
Thanks in advance.
Best regards,
Jeff.
--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!
