Traffic Shaping

[jpscharf]

I really like the ability to set limits on the VMs, but I have two questions.

1) How can I only have the rate limit apply to all addresses except a specific real IP subnet?

2) How can I set a rate limit for the Proxmox server it self, and set the limit to apply to all addresses, except a specific real IP subnet?

 

[steffen]

Sorry for not really bein any help. I am new to proxmox so I am not sure what the standard proxmox way is, but in general rate limiting can be done with iptables, so you can ad a bunch of rules pertaining to the IPs you wish to your firewall.

 

[emanuelebruno]

Why not to use a firewall software like pfsense? It should be able to do what you need

http://forum.proxmox.com/threads/16095-pfSense-2-1-RELEASE-now-available!

 

[wahmed]

Why not to use a firewall software like pfsense? It should be able to do what you need

Totally agree. I personally use pfSense for all traffic shaping. Much easier to setup and control in my opinion.

I am not even sure Proxmox itself can do Traffic Shaping, since it is a Hypervisor and not a Firewall. Although you can manually install things like iptables, i think it is best to leave Proxmox host alone and limit manual installation to the minimum if at all. It is always and always best to put traffic shaping right in the firewall, or in between Firewall and LAN, never inside a LAN.