On Fri, 2018-02-02 at 23:21 +1100, Karl Auer wrote:
I bought an HAP ac lite, intending to use it as a throttle between a bunch of evil leeching wifi users and a client's tender defenseless Internet router. Turns out none of the interfaces on the HPA ac line support the set bandwidth command :-( [...] So I have turned to queues. I cannot figure them out.
HUGE thanks to Michael Junek, who helped me debug this over a dozen email exchanges, provided me with complete examples and patient explanations, and spotted my mistake as soon as I sent him a full config. Thanks too to Thomas Jackson who actually identified the cause of the issue sight-unseen 24 hours ago - fasttrack. For reasons that now seem ridiculous I thought that enabling use-ip- firewall for the bridge would turn off fasttrack. Not so! Which meant that this default firewall rule was interfering with my queues: add action=fasttrack-connection \ chain=forward comment="defconf: fasttrack" \ connection-state=established,related After Michael spotted it I disabled that rule, and queues are now working as expected. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer@nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D Old fingerprint: 58F8 09D4 97E4 D74A 0940 44BC 8D6D C28C 3BC9 B0CB