Hi,

I am IT admin in an organization and we have a very limited internet pipe. I need to compile a server using Linux (may be Iptables or Squid) which can actively monitor the network and can calculate the real time data usage on per host basis. Once the host reaches a limit, then the server automatically starts decreasing host's data bandwidth. For ex.

I have 2MBps internet pipe and have around 100 users. Most of them dont need to heavy download and few of the people are doing movie downloads and blocking the complete bandwidth. Now i need to make a limit on per host basis (could be IP or MAC) of 300 MB per 24 hours. The moment any IP/MAC crosses that limit it's active bandwidth consumption (i.e. 300 MB) speed gets decreased by 60% of active communication and here after it keep on decreasing till the lowest possible value. This way i can limit people from exploiting the network bandwidth. MY network structure is

PC>>Switch>>Router>>Internet.

Now i want

PS>>Switch>>Linux Box>>Router>>Internet.

Please provide me your inputs to archive this goal.

Suggestions:

1. implement squid proxy on your firewall
2. implement QoS to prioritize important traffic
3. read http://lartc.org/lartc.html for any questions you have about traffic control using linux
4. You may want to use snmp to poll switch ports for host bandwidth usage.