QOS / Access Restrictions Notes

[b]All QOS classification and access restriction checking are performed while packets are travelling out - towards the Internet. "SRC" is always from your computer, and "DST" is always be towards the Internet. [/b]

Some L7/IPP2P patterns are directional and may not work as you expect. An HTTP request from a browser, for example, is different from an HTTP response from a server. The patterns are not clear which is which, unfortunately. You also have to take into account that all classifications are performed in the outbound direction only. 

There is an option in the Advanced menu to enable a debug/quick-n-dirty inbound L7 checking. With this option enabled, inbound packets are checked and marked internally as necessary by L7, but are still classified for QOS or checked for access restrictions in the outbound direction only. 

[b]L7 and IPP2P are always evaluated for QOS even if another ip/port match exists already. This was done because L7/IPP2P may require several passes before they find a match. [/b]

Custom L7 patterns can be stored in /etc/l7-extra/ (you need to create the directory). 

To learn more about L7, please visit: http://l7-filter.sourceforge.net/protocols 

[b]If you have a choice between L7/IPP2P or ip/mac/port matching, choose the latter since it requires significantly less resources. [/b]

When changing QOS settings, the firmware will try to flush existing classifications for 30 seconds. During this time, active connections will return to being unclassified. 

[b]Although there is an option to limit the download speed, it's not really recommended in most cases. The only thing the router can do once it already has the data is to drop it, which means the data will need to be re-sent again over a slow Internet link.[/b]