From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <toke@toke.dk>
Received: from mail.toke.dk (mail.toke.dk [52.28.52.200])
 (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by lists.bufferbloat.net (Postfix) with ESMTPS id 26BA03BA8E
 for <cake@lists.bufferbloat.net>; Tue,  4 Sep 2018 06:31:21 -0400 (EDT)
From: Toke =?utf-8?Q?H=C3=B8iland-J=C3=B8rgensen?= <toke@toke.dk>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=20161023;
 t=1536057080; bh=+t/0B7wcCW0hLD/CSAR8W/ftdJe4NPjyDNrUPDJeueU=;
 h=From:To:Subject:In-Reply-To:References:Date:From;
 b=ZtyU1UdD49gqXtSMWMnbMIc4Ut9oOiu1IjT8UTjrHWcdr9r2+22wrF6KXuHLOAtxZ
 cAvPXlilNWlQeBehQoKEOkm4WJWvRvt6IlsjI3DRfYt+V9Ejmjo9DgAD6Q3bFU+NRF
 BOx+0p0Qo8BaEOYFATNEnnMdzzUJ6OuXQIBEHHvyW3YHzmx318cNJowRj7MkJhknlK
 FyzKKakaMACv1LCdJ29liVJ34+wEJC8iv52uBPDkvheIfqpFbOY48J7FaWmjwEuwRr
 ihW8l0U3C2QX2xbgDSJlf+4sNFUK9haWGl4wt7YRmwz31Tnd3ANZ9clsKsGR7AaPfb
 rR/RlkSqKvY8Q==
To: Georgios Amanakis <gamanakis@gmail.com>, cake@lists.bufferbloat.net
In-Reply-To: <CACvFP_jZoezc+oQrk_4F4xwirm2AjMTSAUhBz4VvbL4NBE1V2Q@mail.gmail.com>
References: <CACvFP_jZoezc+oQrk_4F4xwirm2AjMTSAUhBz4VvbL4NBE1V2Q@mail.gmail.com>
Date: Tue, 04 Sep 2018 12:31:19 +0200
X-Clacks-Overhead: GNU Terry Pratchett
Message-ID: <87zhwxzh8o.fsf@toke.dk>
MIME-Version: 1.0
Content-Type: text/plain
Subject: Re: [Cake] Cake on elements of a bridge
X-BeenThere: cake@lists.bufferbloat.net
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Cake - FQ_codel the next generation <cake.lists.bufferbloat.net>
List-Unsubscribe: <https://lists.bufferbloat.net/options/cake>,
 <mailto:cake-request@lists.bufferbloat.net?subject=unsubscribe>
List-Archive: <https://lists.bufferbloat.net/pipermail/cake>
List-Post: <mailto:cake@lists.bufferbloat.net>
List-Help: <mailto:cake-request@lists.bufferbloat.net?subject=help>
List-Subscribe: <https://lists.bufferbloat.net/listinfo/cake>,
 <mailto:cake-request@lists.bufferbloat.net?subject=subscribe>
X-List-Received-Date: Tue, 04 Sep 2018 10:31:21 -0000

Georgios Amanakis <gamanakis@gmail.com> writes:

> Dear All,
>
> I was giving a transparent firewall a try, and wondered whether cake
> can be applied on the interfaces of a bridge. I want to put an extra
> router in-line between clients and the ISP-modem-router. It will have
> two interfaces (eth0 facing wan, eth1 facing lan), bridged together as
> br0.
>
> Can I fearlessly apply cake on eth0 and eth1? Would this be compatible
> with features like ingress, ack-filter or even nat?

Well, you wouldn't get much benefit from the nat feature, as the machine
running CAKE would not be the one doing the nat'ing. But other than
that, it should work fine :)

-Toke