simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

shinobu/router: Add qdisc for guest network

Browse source
This commit is contained in:
Simon Bruder 2023-10-18 20:13:01 +02:00
parent 4611e12772
commit ef62aac941
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
2 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
machines/shinobu/services/router/common.nix
View file

@ -60,7 +60,7 @@ in
# default # default
{ {
minor = 2; minor = 2;
rate = "1000kbit"; rate = "800kbit";
prio = 50; prio = 50;
} }
# DNS, small packets (e.g., TCP ACK) # DNS, small packets (e.g., TCP ACK)
@ -110,6 +110,13 @@ in
ceil = "3000kbit"; ceil = "3000kbit";
prio = 90; prio = 90;
} }
# guest
{
minor = 10;
rate = "200kbit";
ceil = "2000kbit";
prio = 99;
}
]; ];
}; };
} }

2
machines/shinobu/services/router/rules.nft
View file

@ -76,6 +76,8 @@ table inet tc {
} }
chain common { chain common {
iifname "br-guest" meta priority set 1:a counter return comment "guest network"
meta l4proto tcp meta length 1-64 meta priority set 1:3 counter return comment "small tcp packets" meta l4proto tcp meta length 1-64 meta priority set 1:3 counter return comment "small tcp packets"
tcp dport 22 ip dscp af21 meta priority set 1:4 counter return comment "interactive SSH (4)" tcp dport 22 ip dscp af21 meta priority set 1:4 counter return comment "interactive SSH (4)"