<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Hey, all. I've got a geographically dispersed cloud -- the primary control nodes are in MA, but compute nodes in Ottawa and Texas. I'd like to throttle all traffic between the sites (said traffic goes through a single Linux host I'll call a "firewall," though "nexus" would be closer), EXCEPT for when they go to retrieve images, which reside on a single server.<br /> <br /> So, assuming (for simplicity's sake) that I have:<br /> <br /> ----------------<br /> | - compute1 |<br /> | - compute2 | - Ottawa/172.28.0.0/16<br /> | - compute3 | <br /> ----------------<br /> |<br /> ------------------------------<br /> | eth0 |<br /> | | - Firewall<br /> | eth1 - 172.17.5.0/24 |<br /> ------------------------------<br /> | \<br /> ------------ ----------<br /> | control1 | | image |<br /> | control2 | | server |<br /> ------------ ----------</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">172.17.5.9 172.17.5.10</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">172.17.5.8</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">how would I go about throttling all communications through the host (say, to 2 Mb/s), except for the image server? I'm afraid my iptables fu is not strong enough to figure this out with certitude -- which is something I'd really like to do, as someone's VM saturated our WAN uplink overnight, and I've got IT mad at me now, so playing whack-a-spike would be best to be avoided.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Thanks,</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">-Ken</div>
</body></html>