From owner-freebsd-ipfw@FreeBSD.ORG  Tue Apr  3 10:04:33 2007
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
X-Original-To: freebsd-ipfw@freebsd.org
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 1DA7916A409
	for <freebsd-ipfw@freebsd.org>; Tue,  3 Apr 2007 10:04:33 +0000 (UTC)
	(envelope-from stas@crypt.org.ru)
Received: from crypt.org.ru (crypt.org.ru [217.112.39.3])
	by mx1.freebsd.org (Postfix) with ESMTP id 84EFC13C459
	for <freebsd-ipfw@freebsd.org>; Tue,  3 Apr 2007 10:04:32 +0000 (UTC)
	(envelope-from stas@crypt.org.ru)
Received: from [11.0.1.143] ([84.204.194.100]) (authenticated bits=0)
	by crypt.org.ru (8.14.0/8.13.8) with ESMTP id l339WbhA017269
	(version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-SHA bits=256 verify=NO)
	for <freebsd-ipfw@freebsd.org>; Tue, 3 Apr 2007 13:32:38 +0400 (MSD)
Message-ID: <46122005.1010802@crypt.org.ru>
Date: Tue, 03 Apr 2007 13:36:05 +0400
From: Stanislav Kruchinin <stas@crypt.org.ru>
User-Agent: Thunderbird 1.5.0.10 (X11/20070122) Mnenhy/0.7.5.666
MIME-Version: 1.0
To: freebsd-ipfw@freebsd.org
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Difference between pipe in via $int_if and pipe out via $ext_if
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Apr 2007 10:04:33 -0000

Let's consider shaping of traffic that comes from internal network.
I can do this using pipe for outgoing traffic on external interface
# ipfw add pipe 1 ip from 172.16.0.1 to any out via $ext_if

or for incoming traffic on internal interface
# ipfw add pipe 1 ip from 172.16.0.1 to any in via $int_if

Is there any practical difference between these rules?

I've read ipfw(8) manual but didn't found anything about pipe implementation. 
It's a token bucket, right?