Oliver Folini
2002-Jun-08 17:24 UTC
The Ultimate Traffic Conditioner: downlink not working
hi all
i''m pretty new to tc and have not understand a lot of the whole stuff
... but pleas help me!
i tried to use the ''The Ultimate Traffic Conditioner'' - cbq
version -
as it is in ''Linux Advanced Routing & Traffic Control
HOWTO'' chapter 15.
the uplink part i think is working but the download is not working: the
connection to the internet seems to be broken (i can''t ping any
computer). i changed the filter in the download part to only one
ip-address (from 0.0.0.0/0 to 130.59.10.30) to test the filter on this
ip-address. the download part of the script is now
--- form ''The Ultimate Traffic Conditioner:''
DOWNLINK=250
DEV=eth1
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null
######### downlink #############
# slow downloads down to somewhat less than the real speed to prevent
# queuing at our ISP. Tune to see how high you can set it.
# ISPs tend to have *huge* queues to make sure big downloads are fast
#
# attach ingress policer:
tc qdisc add dev $DEV handle ffff: ingress
# filter *everything* to it (0.0.0.0/0), drop everything that''s
# coming in too fast:
tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
130.59.10.30 police rete ${DOWNLINK}kbit burst 10k drop flowid :1
--
with this setup i can ping all ip-addresses without 130.59.10.30. from
the tcpdum i get this information (altair is the computer where tc is
running):
-- output of tcpdump -i eth1
19:16:10.525629 altair.ethz.ch > 130.59.10.30: icmp: echo request (DF)
19:16:10.561771 130.59.10.30 > altair.ethz.ch: icmp: echo reply (DF)
19:16:11.525697 altair.ethz.ch > 130.59.10.30: icmp: echo request (DF)
19:16:11.560400 130.59.10.30 > altair.ethz.ch: icmp: echo reply (DF)
--
so i think the ping can''t pass the above filter. if i comment the
''tc
filter add...'' out, everything is working fine (but the buffer at my
ISP
is growing and growing :( ).
so, do i do something wrong or is this a bug in this script ore elsewhere?
thanks for your help
oliver
ps: some more information about my setup
- on altair there is also running NAT (but the tc-stuff is also not
working without NAT)
- i use a adsl-modem attached to eth1
- altair:~# tc -V
tc utility, iproute2-ss010824