Mandi! Grant Taylor In chel di` si favelave... > Say that there are two physical hosts on the network; A and B. I think i'm missing most of the background here; there's some doc/paper/wiki/... about NS/VETH i can read about? Still i miss how can i 'link' various interfaces... for example: > | > +--+--+ > | WAN | DHCP > | | New network namespace. > | vE0 | Static > +--+--+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > | vE1 | Static > | | Original (main / default / unnamed) network namespace. > | LAN | Static > +--+--+ > | > > Apply tc rules to vE0 for traffic going down. Apply tc rules to vE1 for > traffic going up. This is exactly what i think to do. But... how 'routing' (in loose/sparse sense, not literally) works on namespaces? EG, normally i have public IP address assigned to WAN interface, and private one assigned to LAN; LAN and WAN are not 'linked' between them, apart routing and firewall rules. I don't understand how NS/VETH came into this play... and is surely my fault! In my head i suppose that WAN is 'linked' (again, in loose/sparse sense) to a couple of VETH interfaces as above, and i use vE1 to shape egress traffic and vE0 to shape egress traffic (that is, ingress for vE1). Thanks! -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)