Dynamic pipes

A single pipe configuration can be used to create multiple independent per-flow pipes

ipfw pipe 5 config ... mask src-ip 0x000000ff

Packet's addresses and ports are ANDed with the mask, yielding a flow identifier
For each unique flow identifier a new pipe is created
Statistics are logged individually for each pipe.

ipfw pipe show

Example: per-host bandwidth limitation
side effect: per-host accounting