--=-aSO0nIOmCHgHmMZANVxt
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hi all.Attached is my newly tried scrip.We have a digital 128Kbit
line.This is what I did but the problem is when I do remote admin on the
box it-self with ssh,its very slow.I tried to class it as OUTPUT but I
think something is wrong.
Please help and better my scrip.I dont know much(that's why its such a
mess) but I hope to learn,with some help.

Thanks

--=-aSO0nIOmCHgHmMZANVxt
Content-Disposition: attachment; filename=bandwidth.sh
Content-Type: text/x-sh; name=bandwidth.sh; charset=UTF-8
Content-Transfer-Encoding: 7bit

#!/bin/bash
#  DEV    - set to ethX that connects to DSL/Cable Modem
#  RATEUP - set this to slightly lower than your
#           outbound bandwidth on the DSL/Cable Modem.
#           I have a 1500/128 DSL line and setting
#           RATEUP=90 works well for my 128kbps upstream.
#           However, your mileage may vary.
# NOTE: The following configuration works well for my
# setup: 1.5M/128K ADSL via Pacific Bell Internet (SBC Global Services)

DEV=eth0
RATEUP=128

if [ "$1" = "status" ]
then
        echo "[qdisc]"
        tc -s qdisc show dev $DEV
        echo "[class]"
        tc -s class show dev $DEV
        echo "[filter]"
        tc -s filter show dev $DEV
        echo "[iptables]"
        iptables -t mangle -L MYSHAPER-OUT -v -x 2> /dev/null
        exit
fi

# Reset everything to a known state (cleared)
tc qdisc del dev $DEV root    2> /dev/null > /dev/null
iptables -t mangle -D POSTROUTING -o $DEV -j MYSHAPER-OUT 2> /dev/null >
/dev/null
iptables -t mangle -F MYSHAPER-OUT 2> /dev/null > /dev/null
iptables -t mangle -X MYSHAPER-OUT 2> /dev/null > /dev/null
iptables -t mangle -D PREROUTING -i $DEV -j MYSHAPER-IN 2> /dev/null >
/dev/null

if [ "$1" = "stop" ]
then
        echo "Shaping removed on $DEV."
        exit
fi

###########################################################
#
# Outbound Shaping (limits total bandwidth to RATEUP)

# set queue size to give latency of about 2 seconds on low-prio packets
ip link set dev $DEV qlen 30

# changes mtu on the outbound device.  Lowering the mtu will result
# in lower latency but will also cause slightly lower throughput due
# to IP and TCP protocol overhead.
ip link set dev $DEV mtu 1000

# add HTB root qdisc
tc qdisc add dev $DEV root handle 1: htb default 23

# add main rate limit classes
tc class add dev $DEV parent 1: classid 1:1 htb rate ${RATEUP}kbit

# add leaf classes - We grant each class at LEAST it's "fair share" of
bandwidth.
#                    this way no class will ever be starved by another class. 
Each
#                    class is also permitted to consume all of the available
bandwidth
#                    if no other classes are in use.
tc class add dev $DEV parent 1:1 classid 1:20 htb rate ${RATEUP}kbit ceil
${RATEUP}kbit prio 0
tc class add dev $DEV parent 1:1 classid 1:21 htb rate 96kbit ceil ${RATEUP}kbit
prio 1
tc class add dev $DEV parent 1:1 classid 1:22 htb rate 32kbit ceil ${RATEUP}kbit
prio 2
tc class add dev $DEV parent 1:1 classid 1:23 htb rate 10kbit ceil ${RATEUP}kbit
prio 3

# attach qdisc to leaf classes - here we at SFQ to each priority class.  SFQ
insures that
#                                within each class connections will be treated
(almost) fairly.
tc qdisc add dev $DEV parent 1:20 handle 20: sfq perturb 10
tc qdisc add dev $DEV parent 1:21 handle 21: sfq perturb 10
tc qdisc add dev $DEV parent 1:22 handle 22: sfq perturb 10
tc qdisc add dev $DEV parent 1:23 handle 23: sfq perturb 10

# filter traffic into classes by fwmark - here we direct traffic into priority
class according to
#                                         the fwmark set on the packet (we set
fwmark with iptables
#                                         later).  Note that above we've set the
default priority
#                                         class to 1:23 so unmarked packets (or
packets marked with
#                                         unfamiliar IDs) will be defaulted to
the lowest priority
#                                         class.
tc filter add dev $DEV parent 1:0 prio 0 protocol ip handle 20 fw flowid 1:20
tc filter add dev $DEV parent 1:0 prio 0 protocol ip handle 21 fw flowid 1:21
tc filter add dev $DEV parent 1:0 prio 0 protocol ip handle 22 fw flowid 1:22
tc filter add dev $DEV parent 1:0 prio 0 protocol ip handle 23 fw flowid 1:23

# add MYSHAPER-OUT chain to the mangle table in iptables - this sets up the
table we'll use
#                                                      to filter and mark
packets.
iptables -t mangle -N MYSHAPER-OUT
iptables -t mangle -I POSTROUTING -o $DEV -j MYSHAPER-OUT

# add fwmark entries to classify different types of traffic - Set fwmark from
20-23 according to
#                                                             desired class. 20
is highest prio.
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 0:1024 -j MARK --set-mark 23 #
Default for low port traffic
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 0:1024 -j MARK --set-mark 23 #
""
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 15000:15010 -j MARK --set-mark
20 # For banking software
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 20 -j MARK --set-mark 22     #
ftp-data port, low prio
iptables -t mangle -A MYSHAPER-OUT -p icmp -j MARK --set-mark 20               #
ICMP (ping) - high prio, impress friends
iptables -t mangle -A MYSHAPER-OUT -p udp -j MARK --set-mark 21                #
DNS name resolution (small packets)
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 22 -j MARK --set-mark 20    #
secure shell
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 22 -j MARK --set-mark 20    #
secure shell
iptables -t mangle -A OUTPUT -p tcp --sport 22 -j MARK --set-mark 20    # secure
shell on box
iptables -t mangle -A OUTPUT -p tcp --sport 3000 -j MARK --set-mark 20    # ntop
on box
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 25 -j MARK --set-mark 22    #
mail out
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 25 -j MARK --set-mark 22    #
mail in
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 80 -j MARK --set-mark 21   #
http
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 443 -j MARK --set-mark 21   #
https
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 1433 -j MARK --set-mark 21   #
sql
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 1433 -j MARK --set-mark 21   #
sql
iptables -t mangle -A MYSHAPER-OUT -p tcp -m length --length :64 -j MARK
--set-mark 21 # small packets (probably just ACKs)
iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0 -j MARK --set-mark 23      #
redundant- mark any unmarked packets as 26 (low prio)

# Done with outbound shaping
#
####################################################

echo "Outbound shaping added to $DEV.  Rate: ${RATEUP}Kbit/sec."

# uncomment following line if you only want upstream shaping.
exit

--=-aSO0nIOmCHgHmMZANVxt--