LARTC - May 2005 - wondershaper tweaking

Hi all, ive got wondershaper working well with the highest download
while maintaing minimal latency but the problem is this:

ive got 2 nics in the linux router eth0 and eth1. eth1= internet
interface but this is connected to a router say 10.0.0.190, now off that
router there are other servers, mail server, domino server etc now if i
shape on eth1 ingress and egress using the wondershaper script then i
only get internet speeds to my local servers, when i could be getting
100mbit :)

Hope you can see my dilemma, what i want to do basically is within use
some tc commands to say do not shape traffic at all if it is coming to
or going to these ips: 10.0.0.2 10.0.0.3 10.0.0.4 etc
Im still reading the howtos on how to write my own rules but since the
wondershaper script is doing exactly what i want i had hoped that
someone would know the commands to implement this now :)


my diagram

lan clients -> linux router -> eth1 -> 100mbit router/switch ->
PPPOa
                                            eth1-> 100mbit/switch ->
server1,2,3

Cheers

Anthony

Well as near as I can tell you have at least a few options.

1) You could take a look at the shaping how to that I think is somewhere
linked off the gentoo.org documentation.  That way you could
create/modify a script that would handle it.

2) Change your topology so all your equipment is connected to one
ethernet card with the other dedicated for internet access.  I really
recommend this, if its possible since its the easiest way to firewall
things.

3) Install a third card for your internet access and do the shaping on
that.  That is about the simplest.  You could try something like
ipconfig eth0:1 192.168.55.75 netmask 255.255.255.0 to create a fake
interface, but I haven''t had much luck shaping on them.

Do also note that shaping your download rate is _not_ free.  Afaik it
drops packets to coerce that rate which gets TCP/IP to slow down.

Good luck.


On Mon, 2005-05-09 at 09:29 +0100, Anthony Letchet
wrote:
> Hi all, ive got wondershaper working well with the highest download
> while maintaing minimal latency but the problem is this:
> 
> ive got 2 nics in the linux router eth0 and eth1. eth1= internet
> interface but this is connected to a router say 10.0.0.190, now off that
> router there are other servers, mail server, domino server etc now if i
> shape on eth1 ingress and egress using the wondershaper script then i
> only get internet speeds to my local servers, when i could be getting
> 100mbit :)
> 
> Hope you can see my dilemma, what i want to do basically is within use
> some tc commands to say do not shape traffic at all if it is coming to
> or going to these ips: 10.0.0.2 10.0.0.3 10.0.0.4 etc
> Im still reading the howtos on how to write my own rules but since the
> wondershaper script is doing exactly what i want i had hoped that
> someone would know the commands to implement this now :)
> 
> 
> my diagram
> 
> lan clients -> linux router -> eth1 -> 100mbit router/switch ->
PPPOa
>                                             eth1-> 100mbit/switch ->
> server1,2,3
> 
> Cheers
> 
> Anthony
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> 
-- 
Robert Denier (denier@umr.edu)
PhD Electrical Engineering (May 2005)
University of Missouri-Rolla
http://www.finiteinfinity.com

On Monday 09 May 2005 10:29, Anthony Letchet wrote:
> Im still reading the howtos on how to write my own rules but since the
> wondershaper script is doing exactly what i want i had hoped that
> someone would know the commands to implement this now :)
I did such a modification to wondershaper once for somebody on this list.
The file is still there:

http://www.metamorpher.de/files/wshaper-over-lan.htb

And an image of the class tree:
http://www.metamorpher.de/files/wshaper-over-lan.png

I don''t use this myself, and never tested it myself,
so there is no guarantee that it will actually work.

My basic idea how to solve this was to create one fat class which can use 
the NIC at full speed, and two child classes, one for internet traffic 
which limits to internet speed, and one for LAN traffic, which limits to 
full speed minus internet speed.

I use pretty much the same concept in my FairNAT shaping script (which is 
designed for routers) and it works for me.

HTH
Andreas