MT shaping as a transparent bridge, how to shape NATed users

I have installed MT as a transparent bridge between NAT router and ISP connection, ether1 and ether2 are configured as a bridge so I can see all traffic form our network to ISP. The problem is, that the traffic is already NATed and I can’t recognize traffic by src address, because many users (more than 100) are NATed and some users use public addresses.

When I use tree queue and configure Queue Type as PCQ, I suppose that NATed connections are known as more connections from one user therefore PCQ is not fair to users with public users.

Can I do something seriously to fairy configure connection sharing between NATed and public users? I suppose that changing parameter of pcq-classifier=dst-address can help. Is it correct?

Very important for me is to correctly use burst feature. I suppose, that when configured pcq-classifier=src-address, all NATed users are not able to exploit burst future because they are known as one source.

Is it correct? Or can you help with better solution?

Why not move the MT box to the other side of the NAT router. That way you can see the user traffic before it’s NATted.

Regards

Andrew

yes, but now it is not possible. I described simplified state, in fact I am solving more complex problem.