[ale] Throttling traffic on firewall

[Greg Sabino Mullane]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Has anyone any experience with limiting a large pipe and 
> controlling bandwidth based on domain name or IP?

Yes, but not at a firewall level. The problem is that in order to 
filter by domain name you have to examine the actual data being 
sent, which means just looking at the packet won't be enough, 
you have to look at the HTTP header. If you are using Apache 
(and of course you are :) the best way to do this is with 
mod_throttle, which has some very nice finely-grained 
throttling:

http://www.snert.com/Software/mod_throttle/index.shtml


Greg Sabino Mullane greg at turnstep.com
PGP Key: 0x14964AC8 200202100640

-----BEGIN PGP SIGNATURE-----
Comment: http://www.turnstep.com/pgp.html

iQA/AwUBPGZcRLybkGcUlkrIEQLAvwCfZl02eCPXbKX9814ctmehrC9SZwYAoPKW
Zln6+ZKa+WVqxsCswIhyfKGe
=VuVO
-----END PGP SIGNATURE-----





---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.