Howdy

We would like to set up a Linux Bridge to replace a FreeBSD/ipfw box
doing shaping.  Currently, we can only chape per IP/protocol on the
FreeBSD box, and not by type of traffic (local/international).

Our upstream provider, Internet Solutions (www.is.co.za) differentiates
between Local and International Bandwidth as follows:
"Local traffic DSCP bit is set to 20. International is set to 18."

What steps would be involved in, say, setting up shaping to a host to
give it a 32kb International and 64 local.  Would it be possible to
allow bursting when bandwidth is available?

I have read the LARTC Guide at lartc.org, which has an example of how to
shape an particular host, but not how to incorporate matching the DSCP bit.

I'm assuming iptables is used to match the DSCP bit, something like the
following:
# iptables -t mangle -A INPUT -m dscp --dscp 16 -j ????

Once it is matched, though, how does on force it into a queue? Or am I
thinking of this in the wrong way?

Regards

Warwick Chapman
Marketing and Operations
Thusa Business Support cc

Cellular: +27 83 7797 094
Telephone: +27 31 563 1180
Facsimile: +27 31 563 1182
Website: http://www.thusa.co.za

-- There are 10 types of people in this world. Those
who understand binary, and those who don't.

On Wednesday 22 October 2003 11:39, Warwick Chapman wrote:
> Howdy
>
> We would like to set up a Linux Bridge to replace a FreeBSD/ipfw box
> doing shaping.  Currently, we can only chape per IP/protocol on the
> FreeBSD box, and not by type of traffic (local/international).
>
> Our upstream provider, Internet Solutions (www.is.co.za) differentiates
> between Local and International Bandwidth as follows:
> "Local traffic DSCP bit is set to 20. International is set to
18."
>
> What steps would be involved in, say, setting up shaping to a host to
> give it a 32kb International and 64 local.  Would it be possible to
> allow bursting when bandwidth is available?
>
> I have read the LARTC Guide at lartc.org, which has an example of how to
> shape an particular host, but not how to incorporate matching the DSCP bit.
>
> I'm assuming iptables is used to match the DSCP bit, something like the
> following:
> # iptables -t mangle -A INPUT -m dscp --dscp 16 -j ????
>
> Once it is matched, though, how does on force it into a queue? Or am I
> thinking of this in the wrong way?
If the packets are marked with iptables, you can use the fw filter to put the
packets in a class.
iptables -t mangle -A INPUT -m dscp --dscp 16 -j MARK --set-mark 2

Stef

--
stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.openprojects.net