Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Nov 2006 20:36:19 +0000
From:      "Joao Barros" <joao.barros@gmail.com>
To:        "Bill Moran" <wmoran@collaborativefusion.com>
Cc:        Mark <cvrider@yahoo.com>, freebsd-questions@freebsd.org
Subject:   Re: access-lists and QoS implementation
Message-ID:  <70e8236f0611091236u7cb5be24n32cbfa947ce02086@mail.gmail.com>
In-Reply-To: <20061109143407.67faead3.wmoran@collaborativefusion.com>
References:  <20061109183217.80413.qmail@web55313.mail.re4.yahoo.com> <20061109143407.67faead3.wmoran@collaborativefusion.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 11/9/06, Bill Moran <wmoran@collaborativefusion.com> wrote:
> In response to Mark <cvrider@yahoo.com>:
>
> > I would like to use my FreeBSD box as an ip router,
> > yet it lacks some functionality seen in Cisco boxes. I
> > am looking for a way to create access lists and also
> > do QoS such as LLQ, priority queing, etc. How can this
> > be accomplished in FreeBSD? Also, is there a FreeBSD
> > implementation of NBAR to classify traffic based on
> > higher layer packet information? For example, I would
> > like to allocate 20% bandwidth on an egress interface
> > to traffic matching an ACL or a certain protocol.
>
> Have a look at pf.  I believe it will do everything you need.

pf doesn't support layer 7 protocol inspection. For that take a look
at ng_tag which lives in CURRENT.

-- 
Joao Barros



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70e8236f0611091236u7cb5be24n32cbfa947ce02086>