How can I limit the speed for certain IPs in my network using OpenWrt 25.12.0?

Installing and Using OpenWrt
1

I need to limit the speed for some IPs in the network in OpenWrt 25.12.0. For example, I want to limit the speed for 192.168.137.247 and 192.168.137.230 to 512 kbytes. Or, if possible, I want to apply a limit based on the MAC address. Please give me work instruction what I can to do

2

What operational problem you are trying to solve?

3

Bad ping on online games, then some devices watch youtube on 4k

4

SQM is tailored for your purpose.

5

I don't see on SQM config this option, you have link to manual how to do that?

6

Check if this works on 25.12

uci add firewall include
uci set firewall.@include[-1].type='nftables'
uci set firewall.@include[-1].path='/etc/rate_limit.nft'
uci set firewall.@include[-1].position='chain-pre'
uci set firewall.@include[-1].chain='forward'

cat << "EOF" > /etc/rate_limit.nft
ip saddr { 192.168.137.230, 192.168.137.247 } limit rate over 512 kbytes/second counter drop
ip daddr { 192.168.137.230, 192.168.137.247 } limit rate over 512 kbytes/second counter drop
EOF
uci commit firewall
fw4 restart
2 Likes
7

I was add this on startup, and its work. Thanks for answer)

#!/bin/sh

# creating table
nft add table inet limit_wan

# chain forward
nft 'add chain inet limit_wan forward { type filter hook forward priority 0; policy accept; }'

# ---- UPLOAD (LAN -> WAN) ----

nft add rule inet limit_wan forward ip saddr 192.168.137.247 oifname "wan" limit rate 384 kbytes/second accept
nft add rule inet limit_wan forward ip saddr 192.168.137.247 oifname "wan" drop

nft add rule inet limit_wan forward ip saddr 192.168.137.230 oifname "wan" limit rate 384 kbytes/second accept
nft add rule inet limit_wan forward ip saddr 192.168.137.230 oifname "wan" drop

# ---- DOWNLOAD (WAN -> LAN) ----

nft add rule inet limit_wan forward ip daddr 192.168.137.247 iifname "wan" limit rate 384 kbytes/second accept
nft add rule inet limit_wan forward ip daddr 192.168.137.247 iifname "wan" drop

nft add rule inet limit_wan forward ip daddr 192.168.137.230 iifname "wan" limit rate 384 kbytes/second accept
nft add rule inet limit_wan forward ip daddr 192.168.137.230 iifname "wan" drop
8

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.