OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Using PF to QoS on tun interface

From: Nick Golder (nrgnirgo.net)
Date: Wed Jan 02 2008 - 12:17:51 CST


I inherited a system that is attempting (poorly) to QoS traffic going
across a tun interface (which is being used by OpenVPN). Examples,
books, and ML suggest to tag on the internal interface ingress traffic
and QoS on the external interface egress traffic.

Since the traffic that I want to QoS doesn't really have an egress
interface to QoS on, I am trying to figure out a way to properly QoS
the traffic.

Here is a quick map on the traffic:

rl0 <--> tun0 <--> OpenVPN <--> rl1 <--> Internet

The traffic I want to QoS on is ingress on rl0 which in turn is also
ingress on tun0. By the time it hits rl1, it is OpenVPN traffic.

Any recommendations on how to handle this?

--
Nick Golder