Have a look over at https://forum.openwrt.org/t/ultimate-sqm-settings-layer-cake-dscp-marks/25832 to get ideas how to use veth devices to make the ingress traffic amendable to setting DSCPs which in turn should allow to prirotize ingress packets based on arbitrary iptables properties like the internal IP address; once you got that making a rule to change the DSCP completely for an internal host becomes relatively easy. I am not sure whether that is going to work well with per-internal-IP-fairness though, but it might be closer to what you desire.
1 Like