Hi Georgios,
I believe this should work, it is also easy to test ;)
I would note that in this situation you do not need to employ an ifb device, you can shape on each interfaces egress side to achieve the same effect with a little less computation. Nat will not work as it needs access to data structures only available in the host that actually performs the masquerading. I believe almost everything else should work.... Since you are behind the NAT router, even the dual-xxxhost options should just work...
Best Regards
Sebastian
On Sep 4, 2018, at 12:19, Georgios Amanakis <gamanakis@gmail.com> wrote:
Dear All,
I was giving a transparent firewall a try, and wondered whether cake can be applied on the interfaces of a bridge. I want to put an extra router in-line between clients and the ISP-modem-router. It will have two interfaces (eth0 facing wan, eth1 facing lan), bridged together as br0.
Can I fearlessly apply cake on eth0 and eth1? Would this be compatible with features like ingress, ack-filter or even nat?
Georgios
_______________________________________________
Cake mailing list
Cake@lists.bufferbloat.net
https://lists.bufferbloat.net/listinfo/cake