pf流量限制规则--范例

gunny_cu

VIP_GROUP = "{10.10.2.1,10.10.2.2}"
STD_GROUP = "{10.10.2.4,10.10.3.1,10.10.3.2}"
LMTGUY_GROUP = "{10.10.2.3,10.10.3.3,10.10.3.4}"

altq on $INT_IF cbq bandwidth 10Mb queue {std,vip,lmtguy}
queue std bandwidth 1.2Mb priority 2 cbq (default)
queue vip bandwidth 2Mb priority 3 cbq (borrow)
queue lmtguy bandwidth 500Kb priority 1 cbq
......
#via internal port communication
block all

pass out on $INT_IF from any to $VIP_GROUP flags S/SA keep state queue vip
pass out on $INT_IF from any to $LMTGUY_GROUP flags S/SA keep state queue lmtguy
pass out on $EXT_IF all keep state