This is quiet possibly a simple and obvious question but I''m only
getting
to grips with traffic shaping and filtering. I have a firewall with two
ethernet connections, one internal (eth0) and one external to a modem
(eth1). I''m trying to set up a filter on eth1 that will give
interactive
traffic high priority outgoing and limit downloads to a fixed rate. This
is what I thought wondershaper was meant to do.
However, on the last line of the script
tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
All traffic will be dropped and I can''t figure out why. Any help would
be
appreciated or at least a pointer to the right section to start reading.
Rooting through the archives didn''t seem to have an obvious answer and
neither did the HOWTO but that is likely to be my pooor understanding more
than anything else
Thanks
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
On Thursday 01 May 2003 19:28, Mel Gorman wrote:> This is quiet possibly a simple and obvious question but I''m only getting > to grips with traffic shaping and filtering. I have a firewall with two > ethernet connections, one internal (eth0) and one external to a modem > (eth1). I''m trying to set up a filter on eth1 that will give interactive > traffic high priority outgoing and limit downloads to a fixed rate. This > is what I thought wondershaper was meant to do. > > However, on the last line of the script > > tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \ > 0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1 > > All traffic will be dropped and I can''t figure out why. Any help would be > appreciated or at least a pointer to the right section to start reading. > Rooting through the archives didn''t seem to have an obvious answer and > neither did the HOWTO but that is likely to be my pooor understanding more > than anything elseI can remember me a problem with this line. Do you have ingress support in your kernel? Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
On Fri, 2 May 2003, Stef Coene wrote:> I can remember me a problem with this line. Do you have ingress support in > your kernel? >Yes, compiled as a module(sch_ingress) and it is definetly loaded _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
On Friday 02 May 2003 19:30, Mel Gorman wrote:> On Fri, 2 May 2003, Stef Coene wrote: > > I can remember me a problem with this line. Do you have ingress support > > in your kernel? > > Yes, compiled as a module(sch_ingress) and it is definetly loadedI searched the archives, but I coudn''t find anything. As fas as I remember me, it was a config problem. Do you have tc binary with ingress support? You can enable this if you change the Config file in the iproute2 source: TC_CONFIG_DIFFSERV=y Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/