Rate Limiting on Cisco Router

gordon b slater gordslater at ieee.org
Fri Jul 9 00:33:04 CDT 2010

On Thu, 2010-07-08 at 20:01 -0400, Brandon Kim wrote:
> What about purchasing a low-end packetshaper to be used in between?

If -

1/ budget is a problem


2/ you have no BSD knowledge inhouse


3/ the LAN side is all ethernet

you could have a stab at using a PFsense box with two (and strictly ONLY
two, for this use) physical NICs. It has a GUI to set up traffic shaping
(see the sticky on the pfsense forums) PFsense 1.2.3 is current, don't
go for the experimental 2.0 for production. There's a book and
commercial support if you need it, free support via forums if you can't.

Only two physical NICs is necessary due to shaper problems with more
than two, whereas in a firewalling role the slots are the only limit
(but VLANS are the norm for bucketloads of ports on a firewall PFsense
An ITX (Littlefalls etc) mobo with 512MB RAM with an extra PCI Intel NIC
added will do you fine
PFsense has nice traffic graphs, which helps you with shaping speeds in
a big way. It also has a TFTP server available for it so it's handy for
unmanned sites with only a few blue boxes ;)

PS - a crazy afterthough - surely just about anything with a 10/100
ethernet link running at 100 and placed inline, cannot exceed 100Mbps -
and probably less if it's plastic-cased? Try a few 8-port junkers and
see what happens if you fancy a walk on the dangerous side. Watch out
for errors and smoke :) 

The drinker you are the smoker you get

More information about the NANOG mailing list