How to distribute Internet traffic speed between AD users?

Question

linux

There was a need to distribute the Internet to ActiveDirectory users so that each user (or group of users) had their own Internet traffic speed. For example, the director of the company and the chief accountant - unlimited download speed, and the secretary and librarian - fixed :)
What software tool is suitable for these purposes? It can be for both *nix and Windows. The main thing is to skillfully work with AD.
It is desirable to be able to add URLs to the blacklist. If there is a built-in firewall, then even better :)

Answer 1

a set of scripts on a Linux router.
Get speed parameters from AD (actually the same ldap), bind users to computers, cut strips on a shaper. In principle, it is written in a day.
Well, or look towards the Windows tools, https://ru.wikipedia.org/wiki/Microsoft_Forefront_... , before it was called the ISA server

Answer 2

A firewall is one thing, but speed is another. The speed based on the group the user belongs to can be sliced ​​using Squid. man page for delay pools in Squid (this is about speed), and integration of Squid with AD.
Squid urls can blacklist, that's not a problem. You can also use an external redirector like squidGuard or rejik. If the blacklist is small and there are not very many clients, you can safely use the built-in squid capabilities. If there are hundreds of clients, and a blacklist with regexps also of several hundred (or more) entries, it is better to use a redirector external to the squid to block, the load on the machine is significantly reduced.

Answer 3

kerio control

Answer 4

So and now what as the Internet gateway?

Answer 5

Is it not through QoS that the priorities are scattered https://technet.microsoft.com/ru-ru/library/dd7590... and more. no software needed. It knows how to cut traffic, although for me it’s more logical to scatter priorities for users / user groups.