From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 8A65C3B29E for ; Tue, 4 Sep 2018 08:06:28 -0400 (EDT) Received: from [172.16.11.53] ([134.76.241.253]) by mail.gmx.com (mrgmx001 [212.227.17.190]) with ESMTPSA (Nemesis) id 0McmFl-1gExvu1di5-00Hv7q for ; Tue, 04 Sep 2018 14:06:27 +0200 From: Sebastian Moeller Content-Type: multipart/alternative; boundary="Apple-Mail=_8F5A365E-0489-446D-8493-F43B6C8CD08E" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: References: To: Cake List Date: Tue, 4 Sep 2018 14:06:26 +0200 X-Mailer: Apple Mail (2.3445.9.1) X-Provags-ID: V03:K1:i/duAwW6gg0VnVRnwPmVhYdonKXRiB4dPNJTUadE+M/nhGCjpRw PZ+NEXe8pbSX3PXexoWReDUSKX7A5Bz8p/6xwO4fq4qCeLKTspn7IRQz1MEMATBOUvhMaGx c/SbaLDK8xM6oo6jZxp+LJkxjO2dxs/KQbH8T5TAjQTinRjAgBo6GEIcYc54sydq6/q+1Xm Jt1NZWE/26MgBbwCWNngw== X-UI-Out-Filterresults: notjunk:1;V01:K0:K7KNAs+Suzs=:ScfzXOOFiEegLcBY7/M74c o47aGanf2tZMH03KgOkmyYjGcw/QgD3v0L51rj36W5Iy1TFsTrtjQXwCFpGulgEIjFtCfIIa2 0eFMiYSqIitzK7GT2/SPDUzg8WTHlHamC/2DHImBkgtAhldD+JyiamPkYMjdO+DLcu21WRuLj TwrYQfs6LHkl9YoJTuFOeJk6GK/uRdU4p1isa6LNQm9YZ+p9WIDB5SLayhX5VhAAngJ9CthIN nLYjHr2ACJJAoMs8qLSd5g33Zq0uJW3RqiFhwbzd14dsOCRS7G2/hfZxfCjwYOIpwpLUUqIw1 Z0ZBGqAno3Y0bl0Dtq4eBtxRk5Z/PRjF0CqFw9XMv+7S+rvHCrkmm6eVogQiHPvrbWJYeKLZ4 G1l1AiWsmlSjEM4ck2yPpX13v4jB3bSPyMu2/wtYQc+1+ezORFXnk0NwKqyYX+5BQKrNdyRIQ qOO02f41f0puI6kB+JYG/09uSufPF3DXgQdgrf8y34czohG+M7ytV5C+469uDg0kwmdgeaETl VzuE+bv8BP9wlDMrlHiMysV9LAK7xDWDnWt0NcEVMPII1GfZJPjNIu+6lsqaLGBfnEfc96PS/ FiAsZDQUklaWgTueRKl1+nwdSoBZsBuatcXtT4IhaL3PwiI/FeXy9JCAvh0senGKam0GEfWYt Ugi6dN+t4gwXFjdnczYn2zWYEGq/RyVHFQowUUOPLz/GoX0hQ8nNj9+BGQwJGM67lqqoKenhU Mn7XSzlyXMVSFkwYbPl6SrDmEAeG6vnbenkjM4JXzTdwi0r134M84jAXON7PRh8RRLmQK+sTj B8bxVcm Subject: [Cake] Fwd: Cake on elements of a bridge X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 12:06:28 -0000 --Apple-Mail=_8F5A365E-0489-446D-8493-F43B6C8CD08E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Dear All, again I sent privately what should have been on the list. Now, this does = not add much to Toke's response, but since Georgios referenced it it = seems doubly awkward to keep it off-list... Best Regards Sebastian > Begin forwarded message: >=20 > From: Sebastian Moeller > Subject: Re: [Cake] Cake on elements of a bridge > Date: September 4, 2018 at 12:31:15 GMT+2 > To: Georgios Amanakis >=20 > Hi Georgios, >=20 > I believe this should work, it is also easy to test ;)=20 >=20 > I would note that in this situation you do not need to employ an ifb = device, you can shape on each interfaces egress side to achieve the same = effect with a little less computation. Nat will not work as it needs = access to data structures only available in the host that actually = performs the masquerading. I believe almost everything else should = work.... Since you are behind the NAT router, even the dual-xxxhost = options should just work... >=20 > Best Regards > Sebastian >=20 >=20 >> On Sep 4, 2018, at 12:19, Georgios Amanakis = wrote: >>=20 >> Dear All, >>=20 >> I was giving a transparent firewall a try, and wondered whether cake = can be applied on the interfaces of a bridge. I want to put an extra = router in-line between clients and the ISP-modem-router. It will have = two interfaces (eth0 facing wan, eth1 facing lan), bridged together as = br0.=20 >>=20 >> Can I fearlessly apply cake on eth0 and eth1? Would this be = compatible with features like ingress, ack-filter or even nat? >>=20 >> Georgios >> _______________________________________________ >> Cake mailing list >> Cake@lists.bufferbloat.net >> https://lists.bufferbloat.net/listinfo/cake >=20 --Apple-Mail=_8F5A365E-0489-446D-8493-F43B6C8CD08E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Dear = All,

again I sent = privately what should have been on the list. Now, this does not add much = to Toke's response, but since Georgios referenced it it seems doubly = awkward to keep it off-list...

Best Regards
= Sebastian


Begin = forwarded message:

From: = Sebastian Moeller <moeller0@gmx.de>
Subject: = Re: [Cake] Cake = on elements of a bridge
Date: = September 4, 2018 at 12:31:15 = GMT+2
To: = Georgios Amanakis <gamanakis@gmail.com>

Hi Georgios,

I believe this should work, it is also easy to test ;)

I would note that in this situation you do not = need to employ an ifb device, you can shape on each interfaces egress = side to achieve the same effect with a little less computation. Nat will = not work as it needs access to data structures only available in the = host that actually performs the masquerading. I believe almost = everything else should work.... Since you are behind the NAT router, = even the dual-xxxhost options should just work...

Best Regards
Sebastian


On Sep 4, = 2018, at 12:19, Georgios Amanakis <gamanakis@gmail.com>= wrote:

Dear All,

I was giving a transparent firewall a try, and wondered = whether cake can be applied on the interfaces of a bridge. I want to put = an extra router in-line between clients and the ISP-modem-router. It = will have two interfaces (eth0 facing wan, eth1 facing lan), bridged = together as br0.

Can I fearlessly apply = cake on eth0 and eth1? Would this be compatible with features like = ingress, ack-filter or even nat?

Georgios
_______________________________________________
Cake mailing list
Cake@lists.bufferbloat.net
https://lists.bufferbloat.net/listinfo/cake


= --Apple-Mail=_8F5A365E-0489-446D-8493-F43B6C8CD08E--