I’ve been thinking about utilizing RB5009’s at tower sites for 1Gbps feeds.. would love to be able to apply fq-codel to the upstream interface to just in general have a good way to fairly distribute the bandwidth on the upstream ports.. is it really just as simple as enabling the fq-codel on the upstream port and throughput will get shared?
Does anyone have suggestions on best practice to enable this? ip firewall mangle, or just on the interface?
If it is about shaping all traffic, you can attach it to the interface. Interface queues only applies to egress traffic.
Shaping ingress traffic is less helpful, as it is already to late. It the upstream device priorities incoming traffic “wrong”, there is not much to be done on the WAN interface of your local device if packets where already dropped upstream.
If traffic shaping shall not apply to all traffic, but to certain protocols, addresses or ports, mangling rules to match selected traffic and apply to a queue is the way to go.
An intermediate way is to attach a simple queue to the CPU port of the bridge. There you can apply different queue rules for egress/ingress. http://forum.mikrotik.com/t/some-quick-comments-on-configuring-cake/152505/242
The example is for a virtual PPPoE WAN interface, attach it to the CPU bridge interface if no PPPoE.