firehol icon indicating copy to clipboard operation
firehol copied to clipboard

Interface rate doesn't affect clients via ip forwarding

Open jsteel44 opened this issue 6 years ago • 0 comments

I'm using a very simple config to test this on Arch Linux:

DEVICE=ens224
INPUT_SPEED=512kbps
OUTPUT_SPEED=512kbps
interface $DEVICE world bidirectional input rate $INPUT_SPEED output rate $OUTPUT_SPEED

My plan is to use FireQOS on my gateway VM which has ip forwarding enabled to allow clients to pass traffic through it. Setting a low rate for testing (say 512kbps) affects the gateway VM with FireQOS installed, but clients seem to run at full speed. If I masquerade the clients in iptables then it works, but I don't want to mask the clients as I would like to see true src and dst addresses when it comes to logging/graphing.

One thing to note is that if I set "max 10%" on a class this does seem to have some affect on the clients, but seems to be about 10% of the full possible speed, not 10% of the rate. The gateway VM is affected by dropping to 10% of the rate, so there's a clear difference between clients and the gateway VM despite them both going through the ens224 NIC on the gateway VM for any traffic. Any thoughts would be appreciated. Thanks

jsteel44 avatar Mar 18 '19 14:03 jsteel44