Ok, first of all, you can only shape outgoing traffic. If you have 3 nic's and want to shape traffic from the internet to you, this can be problem. But you can patch the kernel so you can create a virtial imq device. And with simple iptables commands, you can redirect all incoming packets from the internet to this imq device. The good news is you can shape on that imq device.
I've noticed as of late, everyone saying 'you can't shape incoming traffic' but the best solution is to use the imq device.
what happened to ingress /policer usage?
is this not recommended anymore?
I know it doesn't do as efficient job as the normal egress methods, but is imq a lot better ?
when does imq become necessary instead of cbq/htb and ingress?
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Damion de Soto - Software Engineer email: damion@xxxxxxxxxxxx SnapGear --- ph: +61 7 3435 2809 | Custom Embedded Solutions fax: +61 7 3891 3630 | and Security Appliances web: http://www.snapgear.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~