How to limit upload and download bandwidth of a ethernet port?

[i0ntempest]

I searched a bit and asked ChatGPT, it seems like I can limit egress (client upload) rate with `tc` command, but I cannot limit ingress (client download) without ifb, which isn't included in the firmware. Anyone can provide some pointers on how to achieve port based upload and download limits?
Also I'm aware of the built in QoS bandwidth limiter, but since I want to limit the an access port of a guest vlan, I do not have information about any of the clients.

Thanks in advance.

 

[ColinTaylor]

Router model?
Firmware version?

 

[i0ntempest]

Router model?
Firmware version?

BE88U，3006.102.3

 

[degrub]

Depending on how much restriction you want, just use a 2 pair cable instead of a 4 pair lan cable. Hardware will automatically set the bandwidth to 100 Mb/s.
* 10BASE-T Ethernet uses only 2 pairs (1/2 and 3/6).

* 100BASE-TX Fast Ethernet uses only 2 pairs (same ones as above)

All you would have to do is cut one of the other wires in a CAT 5/5e cable - 4,5,7, or 8 and the hardware should detect correctly.

 

[dave14305]

without ifb, which isn't included in the firmware.

IFB should be in the kernel since CAKE needs an IFB to limit download traffic. Did you try to add an IFB?

 

[i0ntempest]

Depending on how much restriction you want, just use a 2 pair cable instead of a 4 pair lan cable. Hardware will automatically set the bandwidth to 100 Mb/s.
* 10BASE-T Ethernet uses only 2 pairs (1/2 and 3/6).

* 100BASE-TX Fast Ethernet uses only 2 pairs (same ones as above)

All you would have to do is cut one of the other wires in a CAT 5/5e cable - 4,5,7, or 8 and the hardware should detect correctly.

I'm aware of that but limiting to 100M is too little. I have a gigabit internet connection and want to set a limit at maybe 500-600M for guests.

 

[fryedchikin]

Maybe it would work to put a low cost managed switch with rate limiting between the port and vlan. Something like Netgear GS105Ev2

 

[i0ntempest]

IFB should be in the kernel since CAKE needs an IFB to limit download traffic. Did you try to add an IFB?

Indeed, I didn't even need to do a modprobe. It's already loaded. But despite that the `tc` command didn't seem to work.

Maybe it would work to put a low cost managed switch with rate limiting between the port and vlan. Something like Netgear GS105Ev2

Ended up doing exactly this with my GS305E, with VLAN tagging enabled to isolate one of the ports to the guest VLAN. Initially I was thinking of experimenting with bandwidth limiting on the router alone, but finally given up.

 

[st3v3n]

Concur, I've never found anything that beats an economical, managed switch,