openbsd's fingerprinting and shaping used for evil^Wgood

merlyn on 2004-01-29T22:12:58

I can't believe I didn't see this earlier. Oh, how sweet.

in /etc/pf.conf:

    altq on $ext_if cbq queue { q_default q_web q_mail }

    queue q_default cbq(default)

    ... queue q_web (not shown) ...

    ## all mail limited to 1Mb/sec
    queue q_mail bandwidth 1Mb { q_mail_windows }
    ## windows mail limited to 56Kb/sec
    queue q_mail_windows bandwidth 56Kb

    ...

    pass in quick proto tcp from any os "Windows" to $ext_if port 25 keep state queue q_mail_windows
    pass in quick proto tcp from any to $ext_if port 25 label "smtp" keep state queue q_mail
Mail coming from windows boxes (all flavors) compete for my virtual 56K line. All other mail can come in the fat pipe. Already a huge difference in my load. Bwa ha ha.


OOoo...

triv on 2004-01-29T22:36:01

That's pretty damn cool.

ooh well DONE sir!

drhyde on 2004-01-29T23:28:16

<applause>

Huzzah!

WebDragon on 2004-01-30T08:00:24

Well Done indeed, sir! Definitely made my day :D

Re:Huzzah!

eleitl on 2004-09-22T13:37:03

Yeah, very elegant. Time to set up an OpenBSD box just for that.

Saw this before, just came over on Dave Farber's IP list: http://www.interesting-people.org/archives/interesting-people/