On 09/20/2011 08:20 PM, Emmanuel Noobadmin wrote:
> I can't put the restrictions within the guest because I don't want the
> individual VM admins to be able to stop the script from running.
>
> On my new host, I have bridged networking with br0, eth0 and guests
> running off vnet<n>.
> I've tried applying tc on br0, eth0, vnet<n> but they don't seem to
> have any effect based on a 20MB FTP test.
>
> I've been googling for a while to find an solution but haven't hit on
> anything apart from using yet another firewall/router sitting between
> everything and the Internet. Is there any other solution apart from
> that?
I would convert bridged setup on host to the routed one.
Then you will have several separate interfaces on host, each one used
for communication with only one guest and it will be easy to attach tc
to them.
Regards,
Nenad