Good day everyone!, I am attaching a diagram of what I wish to accomplish. Its very simple, I wish to limit the speed to access internet per user with hotspot. I have several servers in my LAN and I do not wish to have my hotspot control the speed to which I connect to my servers (file server, apps servers, etc). Is there anything special I need to do?
The best and cleanest solution would be to move the servers to a dedicated network and not have them behind the Hotspot at all. That also allows you to protect from users via the router firewall.
If you can’t do that you can add all their IPs to an address list, mark the packets to and from that address list in prerouting mangle, and build two queue trees attached to global-in and global-out with rate limits of the wire speed. Those will override the simple queues that would otherwise rate limit the servers.
Another approach would be to bypass the servers on the Hotspot and to set the rate limit on the Hotspot instance itself to wirespeed. A simple queue that affects all users behind the Hotspot interface is created based on those values, users that log in get more specific dynamic simple queues created on log in. If the generic rate limit is at wire speed and the servers are set to bypass in IP bindings they effectively have no rate limit. This is easier than overriding with queue trees, but means anyone else bypassed for other reasons or not yet logged in is also operating at wirespeed.