Hello all,
I am trying to solve this problem for more than a month and can not still
find a way how to do it.
If you could please help me and many other people interested in the same
problem.
Lets say, I got this configuration
_____________________________________________ 160kbps/96kbps _____
|imq0(eth1, eth2) Linux router with NAT>ppp0|------------------------|ISP|
--------------------------------------------- -----
+|Roman| - 192.168.1.10 on eth1
+|Phill| - 192.168.2.10 on eth2
+ ...
The point is, that I want to shape the speed of each client
and I want to shape the speed of the services the client uses.
I don''t use iptables to mark the packets, because the use of IMQ,
but I know that there is a patch for this.
So for ex. I want to do if the user is downloading something from FTP,
that he would be able to use the other services like websurfing
or playing games at the same speed as if he didn''t download.
Roman - Rate 80 Ceil 160
+FTP Rate 1 Ceil 160
+Other Traffic Rate 79 Ceil 160
Then I got Phill with the same settings,
but that if Roman is downloading something from FTP it will slow down
while Phill is surfing the web.
There will be some clients, whoose services I dont want to shape,
that''s why I want to do it this way.
Please help me any way, I tried almost everything to get this working
Thank you very much,
Phill
---This is my latest idea---
LOCAL="imq0"
NET="ppp0"
IPT=/sbin/iptables
modprobe imq numdevs=1
ip link set imq0 up
$IPT -t mangle -A PREROUTING -i ppp0 -j IMQ
tc qdisc add dev $LOCAL root handle 1: htb default 999
tc class add dev $LOCAL parent 1:0 classid 1:1 htb rate 160kbit ceil 160kbit
#Roman
tc class add dev $LOCAL parent 1:1 classid 1:110 htb rate 80kbit ceil
160kbit
tc class add dev $LOCAL parent 1:110 classid 1:1101 htb rate rate 79kbit
ceil 160kbit
tc class add dev $LOCAL parent 1:110 classid 1:1102 htb rate 1kbit ceil
160kbit
tc filter add dev $LOCAL parent 1:0 protocol ip u32 match ip dst
192.168.1.10 flowid 1:110
tc filter add dev $LOCAL parent 1:110 protocol ip u32 match ip dst
192.168.1.10 flowid 1:1101
tc filter add dev $LOCAL parent 1:110 protocol ip u32 match ip dport 20
0xffff flowid 1:1102
tc filter add dev $LOCAL parent 1:110 protocol ip u32 match ip dport 21
0xffff flowid 1:1102
#Phill
tc class add dev $LOCAL parent 1:1 classid 1:210 htb rate 80kbit ceil
160kbit
tc class add dev $LOCAL parent 1:210 classid 1:2101 htb rate rate 79kbit
ceil 160kbit
tc class add dev $LOCAL parent 1:210 classid 1:2102 htb rate 1kbit ceil
160kbit
tc filter add dev $LOCAL parent 1:0 protocol ip u32 match ip dst
192.168.1.10 flowid 1:210
tc filter add dev $LOCAL parent 1:210 protocol ip u32 match ip dst
192.168.1.10 flowid 1:2101
tc filter add dev $LOCAL parent 1:210 protocol ip u32 match ip dport 20
0xffff flowid 1:2102
tc filter add dev $LOCAL parent 1:210 protocol ip u32 match ip dport 21
0xffff flowid 1:2102
Phill,
: _____________________________________________ 160kbps/96kbps _____
: |imq0(eth1, eth2) Linux router with NAT>ppp0|------------------------|ISP|
: --------------------------------------------- -----
: +|Roman| - 192.168.1.10 on eth1
: +|Phill| - 192.168.2.10 on eth2
: + ...
I don''t understand what you are trying to convey with the notes
"eth1/eth2"
and 160kbps/96kbps part of the diagram, but the rest makes sense to me.
I''m going to draw a picture of your traffic control structure to point
out
where I think your problem lies.
root class
+ r/c 160kbit
r 80kbit | r 80kbit
c 160kbit +---------------+---------------+ c 160kbit
Roman | | Phill
+---------+---------+ +---------+---------+
| ftp other | | other ftp |
| | | |
r 1kbit r 79kbit r 79kbit r 1kbit
c 160kbit c 160kbit c 160kbit c 160kbit
Note that you have four leaf classes. Two classes, each with a rate of 79kbit
and two each with a rate of 1kbit (which HTB can''t reasonably
accomplish [1],
but your technique should work, anyway--keep reading).
Several items of note.
- HTB only performs shaping in the leaf classes. [2]
- HTB rate is essentially treated as a CIR, and HTB will not
check a parent class to see if a parent class is above its
rate. [2]
- The sum of the rates of your leaf classes is 160kbit. You have
committed all of your bandwidth, and left nothing for borrowing or
dynamic allocation.
Try this instead:
root class
+ r/c 160kbit
r 80kbit | r 80kbit
c 160kbit +---------------+---------------+ c 160kbit
Roman | | Phill
+---------+---------+ +---------+---------+
| ftp other | | other ftp |
| | | |
r 1kbit r 40kbit r 40kbit r 1kbit
c 160kbit c 160kbit c 160kbit c 160kbit
With this sort of configuration, the borrowing model of HTB should distribute
the leftover bandwidth in a way that seems fairer to you. You have now
guaranteed a total of 82kbit to your leaf classes and above that (sum of the
rates of the leaf classes), the leaf classes will try to borrow as much as
they can up to ceil.
: The point is, that I want to shape the speed of each client
: and I want to shape the speed of the services the client uses.
: I don''t use iptables to mark the packets, because the use of IMQ,
: but I know that there is a patch for this.
I don''t know what you mean in this paragraph.....
[ snipped textual description ]
: modprobe imq numdevs=1
: ip link set imq0 up
: $IPT -t mangle -A PREROUTING -i ppp0 -j IMQ
Do you need to use IMQ? It''s not a bad thing to use IMQ, but if your
router
is a separate machine, you can simply attach the "download" shaper to
the
internal interface--the interface closest to Phill and Roman. [3]
[ snipped start of script ]
See notes above about the rate/ceil here.
: ... parent 1:0 protocol ip u32 match ip dst 192.168.1.10 flowid 1:110
: ... parent 1:110 protocol ip u32 match ip dst 192.168.1.10 flowid 1:1101
: ... parent 1:110 protocol ip u32 match ip dport 20 0xffff flowid 1:1102
: ... parent 1:110 protocol ip u32 match ip dport 21 0xffff flowid 1:1102
See note above about IMQ necessity. In particular your u32 classifier with
"ip dport 21" will never match. Do you perhaps mean "ip sport
21"? Still
probably not all that helpful. Your u32 classifier "ip dport 20" is
correct,
but will only work for port mode connections. Check/search the LARTC archives
for a description of the problems involved with shaping FTP (port v. passive
mode data channel). [4]
Best of luck,
-Martin
[1] http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#sharing
(see last paragraph, for mtu=1500, r2q=1, 12kbit is minimum rate)
[2] http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#hsharing
[3] http://www.docum.org/stef.coene/qos/faq/cache/9.html
[4] http://www.google.com/search?q=site%3Amailman.ds9a.nl+ftp+shaping
--
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
WOW, thanks very much, I know I had some problems in understanding the
problem.
When I read my post I found out that it is sometimes not making sense,
sorry.
I am sending my currently working config.
It seems to be working, but I got some problems. When I start downloading
from
the web then the packets flow through class 1:11. And if I starts Dirrect
Connect(P2P)
downloading something. It gets limited to about 5-8kbytes, but I want it to
be something
like 1000kbit or less. That is my first problem.
The second problem is, that I want to make a limitation of speed to some
clients.
Lets say that user Phill won''t download more then 64kbps. I
don''t know how
to do it.
That''s why I was trying to selve it the way in previous email.
Thank you!!!!
Phill
#!/bin/sh
############################################################################
####
# HTB script made by phill
# mailto:phill@seznam.cz
############################################################################
####
LOCAL="imq0"
NET="ppp0"
CeilDownload=170
CeilDouwnloadDC=120 #max download speed for direct connect
CeilUpload=96
CeilUploadDC=16 #max upload speed for direct connect
############################################################################
####
#echo -n "Starting HTB..."
############################################################################
####
modprobe imq numdevs=1
ip link set imq0 up
############################################################################
####
# Download part ...
############################################################################
####
tc qdisc add dev $LOCAL root handle 1: htb default 14
tc class add dev $LOCAL parent 1: classid 1:1 htb rate ${CeilDownload}kbit
ceil ${CeilDownload}kbit
#11-->Fast-WWW,telnet,ssh,ping,...
tc class add dev $LOCAL parent 1:1 classid 1:11 htb rate 100kbit ceil
${CeilDownload}kbit prio 1 burst 15k quantum 100
#12-->Medium-eMail
tc class add dev $LOCAL parent 1:1 classid 1:12 htb rate 25kbit ceil ${
CeilDownload}kbit prio 2 burst 5k quantum 100
#13-->Slow-FTP
tc class add dev $LOCAL parent 1:1 classid 1:13 htb rate 25kbit ceil
${CeilDownload}kbit prio 3 burst 15k quantum 100
#14-->Other stuff-Default
tc class add dev $LOCAL parent 1:1 classid 1:14 htb rate 18kbit ceil
${CeilDownload}kbit prio 4 burst 5k quantum 100
#15-->DC,eDonkey
tc class add dev $LOCAL parent 1:1 classid 1:15 htb rate 2kbit ceil
${CeilDownloadDC}kbit prio 5 quantum 1
tc filter add dev $LOCAL parent 1:0 protocol ip prio 1 handle 1 fw classid
1:11
tc filter add dev $LOCAL parent 1:0 protocol ip prio 2 handle 2 fw classid
1:12
tc filter add dev $LOCAL parent 1:0 protocol ip prio 3 handle 3 fw classid
1:13
tc filter add dev $LOCAL parent 1:0 protocol ip prio 4 handle 4 fw classid
1:14
tc filter add dev $LOCAL parent 1:0 protocol ip prio 5 handle 5 fw classid
1:15
#sfq
tc qdisc add dev $LOCAL parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:14 handle 14: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:15 handle 15: sfq perturb 10
#IPTABLES
#default
iptables -A PREROUTING -t mangle -j MARK --set-mark 0x4
#11
#WWW without squida
iptables -A PREROUTING -t mangle -p tcp --sport 80 -j
MARK --set-mark 0x1
iptables -A PREROUTING -t mangle -p tcp --sport 443 -j
MARK --set-mark 0x1
#WWW through squid <???>
#dont know how but lets say everything going to the router machine
will
#have this class. This works :->
iptables -A PREROUTING -t mangle -p tcp -s 192.168.1.1 -j
MARK --set-mark 0x1
#telnet
iptables -A PREROUTING -t mangle -p tcp --sport 23 -j
MARK --set-mark 0x1
iptables -A PREROUTING -t mangle -p udp --sport 23 -j
MARK --set-mark 0x1
#ssh
iptables -A PREROUTING -t mangle -p tcp --sport 22 -j
MARK --set-mark 0x1
iptables -A PREROUTING -t mangle -p udp --sport 22 -j
MARK --set-mark 0x1
#icmp
iptables -A PREROUTING -t mangle -p icmp -j MARK --set-mark 0x1
#dns
iptables -A PREROUTING -t mangle -p tcp --sport 53 -j
MARK --set-mark 0x1
iptables -A PREROUTING -t mangle -p udp --sport 53 -j
MARK --set-mark 0x1
#ack
iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags
SYN,RST,ACK SYN -j MARK --set-mark 0x1
#12
#pop3
iptables -A PREROUTING -t mangle -p tcp --sport 110 -j MARK --set-mark
0x2
iptables -A PREROUTING -t mangle -p udp --sport 110 -j MARK --set-mark
0x2
#smtp
iptables -A PREROUTING -t mangle -p tcp --sport 25 -j MARK --set-mark
0x2
iptables -A PREROUTING -t mangle -p udp --sport 25 -j MARK --set-mark
0x2
#imap
iptables -A PREROUTING -t mangle -p tcp --sport 143 -j MARK --set-mark
0x2
iptables -A PREROUTING -t mangle -p udp --sport 143 -j MARK --set-mark
0x2
#13
#ftp
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 20:21 -j
MARK --set-mark 0x3
#14
#Other stuff...DEFAULT!!!
#15
#DC 2 users, 2 ports 412,414
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 412 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --dport 412 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 414 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --dport 414 -j
MARK --set-mark 0x5
#eDonkey
iptables -A PREROUTING -t mangle -p tcp --sport 4662 -j MARK --set-mark
0x5
iptables -A PREROUTING -t mangle -p tcp --dport 4662 -j MARK --set-mark
0x5
############################################################################
####
# Download part ... OK
############################################################################
####
############################################################################
####
# Upload part ...
############################################################################
####
tc qdisc add dev $NET root handle 2: htb default 21
tc class add dev $NET parent 2: classid 2:1 htb rate ${CeilUpload}kbit
ceil ${CeilUpload}kbit
#11-->Fast-everything...Default
tc class add dev $NET parent 2:1 classid 2:11 htb rate 90kbit ceil
${CeilUpload}kbit prio 7 burst 15k
#12-->Slow-DC,edonkey upload
tc class add dev $NET parent 2:1 classid 2:12 htb rate 6kbit ceil
${CeilUploadDC}kbit prio 8 burst 5k quantum 1
tc filter add dev $NET parent 2:0 protocol ip prio 1 handle 1 fw classid
2:11
tc filter add dev $NET parent 2:0 protocol ip prio 5 handle 5 fw classid
2:12
############################################################################
####
# Upload part ... OK
############################################################################
####
iptables -t mangle -A PREROUTING -i ppp0 -j IMQ
echo " OK"
> Phill,
>
> : _____________________________________________ 160kbps/96kbps
_____> : |imq0(eth1, eth2) Linux router with
NAT>ppp0|------------------------|ISP|>
------------------------- -----> : +|Roman| - 192.168.1.10 on eth1
> : +|Phill| - 192.168.2.10 on eth2
> : + ...
>
> I don''t understand what you are trying to convey with the notes
"eth1/eth2"> and 160kbps/96kbps part of the diagram, but the rest makes sense to me.
>
> I''m going to draw a picture of your traffic control structure to
point out
> where I think your problem lies.
>
> root class
> + r/c 160kbit
> r 80kbit | r 80kbit
> c 160kbit +---------------+---------------+ c 160kbit
> Roman | | Phill
> +---------+---------+ +---------+---------+
> | ftp other | | other ftp |
> | | | |
> r 1kbit r 79kbit r 79kbit r 1kbit
> c 160kbit c 160kbit c 160kbit c 160kbit
>
>
> Note that you have four leaf classes. Two classes, each with a rate of
79kbit> and two each with a rate of 1kbit (which HTB can''t reasonably
accomplish
[1],> but your technique should work, anyway--keep reading).
>
> Several items of note.
>
> - HTB only performs shaping in the leaf classes. [2]
> - HTB rate is essentially treated as a CIR, and HTB will not
> check a parent class to see if a parent class is above its
> rate. [2]
> - The sum of the rates of your leaf classes is 160kbit. You have
> committed all of your bandwidth, and left nothing for borrowing or
> dynamic allocation.
>
> Try this instead:
>
> root class
> + r/c 160kbit
> r 80kbit | r 80kbit
> c 160kbit +---------------+---------------+ c 160kbit
> Roman | | Phill
> +---------+---------+ +---------+---------+
> | ftp other | | other ftp |
> | | | |
> r 1kbit r 40kbit r 40kbit r 1kbit
> c 160kbit c 160kbit c 160kbit c 160kbit
>
>
> With this sort of configuration, the borrowing model of HTB should
distribute> the leftover bandwidth in a way that seems fairer to you. You have now
> guaranteed a total of 82kbit to your leaf classes and above that (sum of
the> rates of the leaf classes), the leaf classes will try to borrow as much as
> they can up to ceil.
>
> : The point is, that I want to shape the speed of each client
> : and I want to shape the speed of the services the client uses.
> : I don''t use iptables to mark the packets, because the use of
IMQ,
> : but I know that there is a patch for this.
>
> I don''t know what you mean in this paragraph.....
>
> [ snipped textual description ]
>
> : modprobe imq numdevs=1
> : ip link set imq0 up
> : $IPT -t mangle -A PREROUTING -i ppp0 -j IMQ
>
> Do you need to use IMQ? It''s not a bad thing to use IMQ, but if
your
router> is a separate machine, you can simply attach the "download"
shaper to the
> internal interface--the interface closest to Phill and Roman. [3]
>
> [ snipped start of script ]
>
> See notes above about the rate/ceil here.
>
> : ... parent 1:0 protocol ip u32 match ip dst 192.168.1.10 flowid 1:110
> : ... parent 1:110 protocol ip u32 match ip dst 192.168.1.10 flowid
1:1101> : ... parent 1:110 protocol ip u32 match ip dport 20 0xffff flowid 1:1102
> : ... parent 1:110 protocol ip u32 match ip dport 21 0xffff flowid 1:1102
>
> See note above about IMQ necessity. In particular your u32 classifier
with> "ip dport 21" will never match. Do you perhaps mean "ip
sport 21"? Still
> probably not all that helpful. Your u32 classifier "ip dport 20"
is
correct,> but will only work for port mode connections. Check/search the LARTC
archives> for a description of the problems involved with shaping FTP (port v.
passive> mode data channel). [4]
>
> Best of luck,
>
> -Martin
>
> [1] http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#sharing
> (see last paragraph, for mtu=1500, r2q=1, 12kbit is minimum rate)
> [2] http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#hsharing
> [3] http://www.docum.org/stef.coene/qos/faq/cache/9.html
> [4] http://www.google.com/search?q=site%3Amailman.ds9a.nl+ftp+shaping
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
I am sending the script onesmore, because the lines are longer than 80 chars.
Thanx,
Phill
#!/bin/sh
################################################################################
# HTB script made by phill
# mailto:phill@seznam.cz
################################################################################
LOCAL="imq0"
NET="ppp0"
CeilDownload=170
CeilDouwnloadDC=120 #max download speed for direct connect
CeilUpload=96
CeilUploadDC=16 #max upload speed for direct connect
################################################################################
#echo -n "Starting HTB..."
################################################################################
modprobe imq numdevs=1
ip link set imq0 up
################################################################################
# Download part ...
################################################################################
tc qdisc add dev $LOCAL root handle 1: htb default 14
tc class add dev $LOCAL parent 1: classid 1:1 htb rate ${CeilDownload}kbit
ceil ${CeilDownload}kbit
#11-->Fast-WWW,telnet,ssh,ping,...
tc class add dev $LOCAL parent 1:1 classid 1:11 htb rate 100kbit ceil
${CeilDownload}kbit prio 1 burst 15k quantum 100
#12-->Medium-eMail
tc class add dev $LOCAL parent 1:1 classid 1:12 htb rate 25kbit ceil
${CeilDownload}kbit prio 2 burst 5k quantum 100
#13-->Slow-FTP
tc class add dev $LOCAL parent 1:1 classid 1:13 htb rate 25kbit ceil
${CeilDownload}kbit prio 3 burst 15k quantum 100
#14-->Brak-Default
tc class add dev $LOCAL parent 1:1 classid 1:14 htb rate 18kbit ceil
${CeilDownload}kbit prio 4 burst 5k quantum 100
#15-->DC,eDonkey
tc class add dev $LOCAL parent 1:1 classid 1:15 htb rate 2kbit ceil
${CeilDownloadDC}kbit prio 5 quantum 1
tc filter add dev $LOCAL parent 1:0 protocol ip prio 1 handle 1 fw classid 1:11
tc filter add dev $LOCAL parent 1:0 protocol ip prio 2 handle 2 fw classid 1:12
tc filter add dev $LOCAL parent 1:0 protocol ip prio 3 handle 3 fw classid 1:13
tc filter add dev $LOCAL parent 1:0 protocol ip prio 4 handle 4 fw classid 1:14
tc filter add dev $LOCAL parent 1:0 protocol ip prio 5 handle 5 fw classid 1:15
#sfq
tc qdisc add dev $LOCAL parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:14 handle 14: sfq perturb 10
tc qdisc add dev $LOCAL parent 1:15 handle 15: sfq perturb 10
#IPTABLES
#default
iptables -A PREROUTING -t mangle -j MARK --set-mark 0x4
#11
#WWW without squida
iptables -A PREROUTING -t mangle -p tcp --sport 80 -j MARK --set-mark
0x1
iptables -A PREROUTING -t mangle -p tcp --sport 443 -j MARK --set-mark
0x1
#WWW through squid <???>
#dont know how but lets say everything going to the router machine will
#have this class. This works :->
iptables -A PREROUTING -t mangle -p tcp -s 192.168.1.1 -j
MARK --set-mark 0x1
#telnet
iptables -A PREROUTING -t mangle -p tcp --sport 23 -j MARK --set-mark
0x1
iptables -A PREROUTING -t mangle -p udp --sport 23 -j MARK --set-mark
0x1
#ssh
iptables -A PREROUTING -t mangle -p tcp --sport 22 -j MARK --set-mark
0x1
iptables -A PREROUTING -t mangle -p udp --sport 22 -j MARK --set-mark
0x1
#icmp
iptables -A PREROUTING -t mangle -p icmp -j MARK --set-mark 0x1
#dns
iptables -A PREROUTING -t mangle -p tcp --sport 53 -j MARK --set-mark
0x1
iptables -A PREROUTING -t mangle -p udp --sport 53 -j MARK --set-mark
0x1
#ack
iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK
SYN -j MARK --set-mark 0x1
#12
#pop3
iptables -A PREROUTING -t mangle -p tcp --sport 110 -j MARK --set-mark 0x2
iptables -A PREROUTING -t mangle -p udp --sport 110 -j MARK --set-mark 0x2
#smtp
iptables -A PREROUTING -t mangle -p tcp --sport 25 -j MARK --set-mark 0x2
iptables -A PREROUTING -t mangle -p udp --sport 25 -j MARK --set-mark 0x2
#imap
iptables -A PREROUTING -t mangle -p tcp --sport 143 -j MARK --set-mark 0x2
iptables -A PREROUTING -t mangle -p udp --sport 143 -j MARK --set-mark 0x2
#13
#ftp
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 20:21 -j
MARK --set-mark 0x3
#14
#Brak...DEFAULT!!!
#15
#DC 2 users, 2 ports 412,414
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 412 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --dport 412 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --sport 414 -j
MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp -m tcp --dport 414 -j
MARK --set-mark 0x5
#eDonkey
iptables -A PREROUTING -t mangle -p tcp --sport 4662 -j MARK --set-mark 0x5
iptables -A PREROUTING -t mangle -p tcp --dport 4662 -j MARK --set-mark 0x5
################################################################################
# Download part ... OK
################################################################################
################################################################################
# Upload part ...
################################################################################
tc qdisc add dev $NET root handle 2: htb default 21
tc class add dev $NET parent 2: classid 2:1 htb rate ${CeilUpload}kbit ceil
${CeilUpload}kbit
#11-->Fast-everything...Default
tc class add dev $NET parent 2:1 classid 2:11 htb rate 90kbit ceil
${CeilUpload}kbit prio 7 burst 15k
#12-->Slow-DC,edonkey upload
tc class add dev $NET parent 2:1 classid 2:12 htb rate 6kbit ceil
${CeilUploadDC}kbit prio 8 burst 5k quantum 1
tc filter add dev $NET parent 2:0 protocol ip prio 1 handle 1 fw classid 2:11
tc filter add dev $NET parent 2:0 protocol ip prio 5 handle 5 fw classid 2:12
################################################################################
# Upload part ... OK
################################################################################
iptables -t mangle -A PREROUTING -i ppp0 -j IMQ
echo " OK"
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Hi Phill,
: CeilDouwnloadDC=120 #max download speed for direct connect
Is this a typographical error? "CeilDownloadDC" instead of what you
have
written?
[ snip ]
: #11-->Fast-WWW,telnet,ssh,ping,...
: tc class add dev $LOCAL parent 1:1 classid 1:11 htb rate 100kbit ceil
: ${CeilDownload}kbit prio 1 burst 15k quantum 100
I don''t think this is a good idea for a quantum size. I''d
suggest a
quantum of minimum MTU size.
[ snip ]
: tc class add dev $LOCAL parent 1:1 classid 1:15 htb rate 2kbit ceil
: ${CeilDownloadDC}kbit prio 5 quantum 1
Did you meant to set r2q to 1? A quantum of one penalizes this class
severely.
[ snip sfqs and fw classifiers/filters ]
( good idea to add the terminal sfq qdiscs )
[ snip many iptables rules ]
:
################################################################################
: # Upload part ...
:
################################################################################
:
: tc qdisc add dev $NET root handle 2: htb default 21
:
: tc class add dev $NET parent 2: classid 2:1 htb rate ${CeilUpload}kbit ceil
: ${CeilUpload}kbit
:
: #11-->Fast-everything...Default
: tc class add dev $NET parent 2:1 classid 2:11 htb rate 90kbit ceil
: ${CeilUpload}kbit prio 7 burst 15k
Good! You should get decent interactive performance out of this class!
: #12-->Slow-DC,edonkey upload
: tc class add dev $NET parent 2:1 classid 2:12 htb rate 6kbit ceil
: ${CeilUploadDC}kbit prio 8 burst 5k quantum 1
Again, with a quantum of 1, you several penalize this upload. I would
agree that this is a good class to penalize. There is no reason to give
away your bandwidth, but this will limit the upload rate to an almost
neglible rate.
Best of luck, Phill,
-Martin
--
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Hello,> : CeilDouwnloadDC=120 #max download speed for direct connect > > Is this a typographical error? "CeilDownloadDC" instead of what you have > written?YES, This is a mistake I know about. I have fixed it already. Sorry> : #11-->Fast-WWW,telnet,ssh,ping,... > : tc class add dev $LOCAL parent 1:1 classid 1:11 htb rate 100kbit ceil > : ${CeilDownload}kbit prio 1 burst 15k quantum 100 > > I don''t think this is a good idea for a quantum size. I''d suggest a > quantum of minimum MTU size.Ok, I will raise it. I thought that if it is too big, it will take a larger time to send the packets then. I want the ping to be as small as possible (fast surfing and game playing-rulles not added yet). I guess that quantum 2000 is ok.> > : tc class add dev $LOCAL parent 1:1 classid 1:15 htb rate 2kbit ceil > : ${CeilDownloadDC}kbit prio 5 quantum 1 > > Did you meant to set r2q to 1? A quantum of one penalizes this class > severely.No, I wanted DC (Direct connect -P2P program?) not to eat my bandwidth, to have the lowest priority. With this settings it almost stops. Is there anything else I could do for that. I really want it to stop sending data if some one is useing the line. Should I leave the quantum parameter,or change it to what? > ( good idea to add the terminal sfq qdiscs )> :################################################################################> : # Upload part ... > :################################################################################> : > : tc qdisc add dev $NET root handle 2: htb default 21 > : > : tc class add dev $NET parent 2: classid 2:1 htb rate ${CeilUpload}kbitceil> : ${CeilUpload}kbit > : > : #11-->Fast-everything...Default > : tc class add dev $NET parent 2:1 classid 2:11 htb rate 90kbit ceil > : ${CeilUpload}kbit prio 7 burst 15k > > Good! You should get decent interactive performance out of this class! > > : #12-->Slow-DC,edonkey upload > : tc class add dev $NET parent 2:1 classid 2:12 htb rate 6kbit ceil > : ${CeilUploadDC}kbit prio 8 burst 5k quantum 1 > > Again, with a quantum of 1, you several penalize this upload. I would > agree that this is a good class to penalize. There is no reason to give > away your bandwidth, but this will limit the upload rate to an almost > neglible rate.The same problem as above. I dont want to give the upload speed to DC, that''s why the rate is small and cail too. I thought that if I set quantum small it will be good too. Am I right? BTW I meassured that the rate matches the CeilUploadDC parametr. --------------- I have tweaked the script to this state and it works. Of course I want to fix these mistakes. I am very glad, that you are helping me!!! The next thing is, that I wanted to shape the traffic for each user. Lets say I want to shape speed of one user with IP 192.168.2.10 to rate 32 ceil 64. Is there a way how to implement it to this script? Because really I like this script, which helps interactive traffic and web browsing. If you have some code you can send me, I will be very happy. Don''t matter what it is, that''s the best way to learn from. If you do send them please to my private phill@seznam.cz. Thanks Thanks for your help, Phill _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/