[squid-users] Delay Pools or Traffic Shaping per port?!

[Christian Kunkel]

>>> How many users do you have?
>> 
>> i wanted to put about 200-500 users on a server. is that possible?
> 
> Certainly no problem for Squid, and I guess you could assign that number of 
> separate listening ports for use one per user, but I'll let someone who knows 
> more about Squid's internals for such an unusual setup comment on that if 
> needed.

ok.
> 
>>> - are you trying to limit the *inbound* bandwidth to Squid per user, or
>>> the *outbound* bandwidth from Squid to each user?
>> 
>> i want to limit the bandwidth. lets say user has 50mbit but i want him only
>> to use 10mbit.
> 
> So, that's the outbound bandwidth from Squid to the user, then?  You don't 
> mind if Squid fetches the requested content faster than that if it can, and 
> then feeds it to the user no faster than 10Mbps?

yep. that can work this way.
> 
> Is this limit true for all users - ie: is there a single bandwidth limit you 
> want to apply to all users, or are you trying to set different limits for 
> different users?

only one limit for every user.
> 
>>> - what's the primary reason for wanting to restrict the bandwidth per
>>> user?
>> 
>> server has not unlimited speed. better control of the server bandwidth.
> 
> What total bandwidth are you dealing with?
1gbit/s (but i guess its a bit less than that. maybe it will peak at 500mbit)
> What's the server load when it runs into problems?
have not tested it so far with so many users.
> How many concurrent user sessions do you have when the problems occur?
no problems right. cause not enough load.
> What are the effects of the problems you're having?
> 
> Is there any reason you can't use authentication to identify different users?
it does not work with nated ips. it autheticates with ip adress anyway. so it will limit the ip to 10mbit but behind that ip there are maybe 10 or more ppl.
> 
> What stops users "investigating" the system, and finding out they can get extra 
> bandwidth by using ports which haven't been assigned to them?

thats the second problem to deal with. there is some kind of a captive portal with login but it opens the port after user autheticates so actually someone else can use that port. so if you have an idea. i would be really thankful :)

Kind regards,

Chris