From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-lf1-x12e.google.com (mail-lf1-x12e.google.com [IPv6:2a00:1450:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 1B0403B29E for ; Tue, 4 Sep 2018 08:01:42 -0400 (EDT) Received: by mail-lf1-x12e.google.com with SMTP id c29-v6so2741589lfj.1 for ; Tue, 04 Sep 2018 05:01:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=429Qup5DoyGgM3X6dFodpHj+ADxqOdj7033Tb1bUoyQ=; b=GxU++5FkoCbFXfBPxLFkYWJxSgsH9lp95IPWwmX5PXNrn827x9WxOo3F3g6vcIL56W 1RiMu824VXCch236dzANp1id8B5Y3eQlqNRK6ed6f7XcfLgfs2e7U0W6+l/218L03s8J fr2BgOeo3c3fA7T0roIWHIvX/XnfZYZU4aHwOkTJRGd8fFOxzzNDDJXxVL+P5cPbkzBx HAi7xRNdxLNT3fTjku8DNf1KmK+XdgVYMckAvufYgz9yRMfaGpsRzhpaxe7xfgoJJQAL 9TLBzt5OUiSzQGim/yiddgXufYkOiFai/zfF1w+pRuewlj2QB6imlQdMl2HG11MyLYES 0obg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=429Qup5DoyGgM3X6dFodpHj+ADxqOdj7033Tb1bUoyQ=; b=ra/76vdYoWZAOcgj3Lq/5rmlPVPFmFUyw6RPQBUsZp50AirQAB5ksCgOhboYYvIHcS eEbWbs37b/D9Tg5Qw6srYn24/T9bXXJkF710nKs54Ucn03E8a7zWk/PLSe06oW8qN+ZW xnbiEcjgl4TetXXK+LLUN+JPjF03LssmIwCnZMtLcl57rZlDGkMHBArsgs+9dPX0UzqT RyUzOFNTIFzSdgBuVaI6guJnSKFWWZqJqVBTm8YiZ86D1qe0qJUGFndGIcdYoFMlEYoY 4MxphkAvoTdRbknlr3Y3hpZxhNMA1KY1L44Q5UbHn8yB7prVqPBm+7416ASsyYDbkrK/ vxeQ== X-Gm-Message-State: APzg51DP8m7ibrN9MuIhjGnUFtQGeFOoEUCKE7X6eBFGAaBPkSmScHmc OqHT50UYh/wDo08bHu4hK3POI+9MwIqLUjL4mLc= X-Google-Smtp-Source: ANB0Vdaxd1hgavODevnG6pGo6XlvrLcD2i2qS59x9Moh0izhTbSf7ur3gazjhaFIJEOUsjUo4H1HwlXFPg9Sg/V/8Fs= X-Received: by 2002:a19:2a51:: with SMTP id f78-v6mr20908433lfl.97.1536062500752; Tue, 04 Sep 2018 05:01:40 -0700 (PDT) MIME-Version: 1.0 References: <87zhwxzh8o.fsf@toke.dk> In-Reply-To: <87zhwxzh8o.fsf@toke.dk> From: Georgios Amanakis Date: Tue, 4 Sep 2018 15:01:29 +0300 Message-ID: To: =?UTF-8?B?VG9rZSBIw7hpbGFuZC1Kw7hyZ2Vuc2Vu?= Cc: Cake List Content-Type: multipart/alternative; boundary="000000000000b5d31d05750a6b91" Subject: Re: [Cake] Cake on elements of a bridge X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 12:01:42 -0000 --000000000000b5d31d05750a6b91 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Awesome, thanks to both of you! I am aware of the uselessness of nat (in terms of cake) in this setup. It's good to know what Sebastian pointed out. I ran it for a couple of hours and it seems to be working fine. I am going to finalize the setup and will get back to you. Georgios On 4 Sep 2018 1:31 pm, "Toke H=C3=B8iland-J=C3=B8rgensen" wr= ote: Georgios Amanakis writes: > Dear All, > > I was giving a transparent firewall a try, and wondered whether cake > can be applied on the interfaces of a bridge. I want to put an extra > router in-line between clients and the ISP-modem-router. It will have > two interfaces (eth0 facing wan, eth1 facing lan), bridged together as > br0. > > Can I fearlessly apply cake on eth0 and eth1? Would this be compatible > with features like ingress, ack-filter or even nat? Well, you wouldn't get much benefit from the nat feature, as the machine running CAKE would not be the one doing the nat'ing. But other than that, it should work fine :) -Toke --000000000000b5d31d05750a6b91 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Awesome, thanks to both of you!=C2=A0
I = am aware of the uselessness of nat (in terms of cake) in this setup. It'= ;s good to know what Sebastian pointed out. I ran it for a couple of hours = and it seems to be working fine. I am going to finalize the setup and will = get back to you.

Georgio= s

On 4= Sep 2018 1:31 pm, "Toke H=C3=B8iland-J=C3=B8rgensen" <to= ke@toke.dk> wrote:
Georgios Amanakis <gamanakis@gmail.com> writes:

> Dear All,
>
> I was giving a transparent firewall a try, and wondered whether cake > can be applied on the interfaces of a bridge. I want to put an extra > router in-line between clients and the ISP-modem-router. It will have<= br> > two interfaces (eth0 facing wan, eth1 facing lan), bridged together as=
> br0.
>
> Can I fearlessly apply cake on eth0 and eth1? Would this be compatible=
> with features like ingress, ack-filter or even nat?

Well, you wouldn't get much benefit from the nat feature, as the machin= e
running CAKE would not be the one doing the nat'ing. But other than
that, it should work fine :)


-Toke

--000000000000b5d31d05750a6b91--