thr3ads.net - LARTC - Guarantee ICMP respond time ? [Feb 2006]

If this information is useful, please help other people find it:
Share via:

Stanislav Nedelchev

2006-Feb-14 20:35 UTC

Guarantee ICMP respond time ?

Hello to all people there .
Can i guarantee ICMP respond time no metter how loaded is internet line .
i have typical NATed enviroiment   like

External IP |linux router| LAN - 192.168.0.0/24

i have example setup with IMQ but is it possible to be done also if i
attache htb to eth0 and eth1 for example .

if i start shaper ping i better that without shaper but it''s not
guarantted i mean response  time is not like constant.

Maybe i''m missing something.
Is it possible with HTB ot with something else like CBQ ?
here is my example setup




echo "Loading Traffic Shaper IMQ0 Upload"
tc qdisc  del dev imq0 root
tc qdisc  add dev imq0 root handle 2: htb default 333 r2q 1

tc class  add dev imq0 parent 2: classid 2:2 htb rate 192kbit

#ICMP
tc class  add dev imq0 parent 2:2 classid 2:30 htb rate 32kbit prio 0
tc filter add dev imq0 parent  2:0 protocol ip handle 5 fw classid 2:30
tc qdisc  add dev imq0 parent 2:30 handle 30: sfq perturb 1



tc class  add dev imq0 parent 2:2 classid 2:24 htb rate 96kbit ceil
160kbit prio 1
tc filter add dev imq0 parent  2:0 protocol ip handle 1 fw classid 2:24

tc qdisc  add dev imq0 parent 2:24 handle 24: sfq perturb 10

tc class  add dev imq0 parent 2:2 classid 2:26 htb rate 32kbit ceil
128kbit prio 3
tc filter add dev imq0 parent 2:0 protocol ip handle 2 fw classid 2:26
#tc qdisc  add dev imq0 parent 2:26 handle 26: sfq perturb 10

tc class  add dev imq0 parent 2:2 classid 2:28 htb rate 16kbit ceil
64kbit prio 5
tc filter add dev imq0 parent  2:0 protocol ip handle 3 fw classid 2:28
#tc qdisc  add dev imq0 parent 2:28 handle 28: sfq perturb 10

tc  class  add dev imq0 parent  2:2 classid 2:333 htb rate 16kbit ceil
128kbit prio 7
tc  qdisc  add dev imq0 parent  2:333 handle 333: sfq perturb 10

echo "Done"

#-----------------------------------------------------------------------------
#-----------------------------------------------------------------------------


echo "Loading Traffic Shaper imq1 Upload"
tc qdisc  del dev imq1 root
tc qdisc  add dev imq1 root handle 2: htb default 333 r2q 1

tc class  add dev imq1 parent 2: classid 2:2 htb rate 192kbit

#ICMP
tc class  add dev imq1 parent 2:2 classid 2:30 htb rate 32kbit prio 0
tc filter add dev imq1 parent  2:0 protocol ip handle 5 fw classid 2:30
tc qdisc  add dev imq1 parent 2:30 handle 30: sfq perturb 1



tc class  add dev imq1 parent 2:2 classid 2:24 htb rate 96kbit ceil
160kbit prio 1
tc filter add dev imq1 parent  2:0 protocol ip handle 1 fw classid 2:24



tc qdisc  add dev imq1 parent 2:24 handle 24: sfq perturb 10

tc class  add dev imq1 parent 2:2 classid 2:26 htb rate 32kbit ceil
128kbit prio 3
tc filter add dev imq1 parent 2:0 protocol ip handle 2 fw classid 2:26
#tc qdisc  add dev imq1 parent 2:26 handle 26: sfq perturb 10

tc class  add dev imq1 parent 2:2 classid 2:28 htb rate 16kbit ceil
64kbit prio 5
tc filter add dev imq1 parent  2:0 protocol ip handle 3 fw classid 2:28
#tc qdisc  add dev imq1 parent 2:28 handle 28: sfq perturb 10

tc  class  add dev imq1 parent  2:2 classid 2:333 htb rate 16kbit ceil
128kbit prio 7
tc  qdisc  add dev imq1 parent  2:333 handle 333: sfq perturb 10

echo "Done"

#Priority 0
iptables -t mangle -I PREROUTING  -p icmp -j MARK --set-mark 5

#Priority 1
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 3389  -j MARK
--set-mark 1
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 3389  -j MARK
--set-mark 1

#Priority 2
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 25   -j MARK
--set-mark 2
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 25   -j MARK
--set-mark 2

#Priority 3
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 80   -j MARK
--set-mark 3
iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 80   -j MARK
--set-mark 3


#Priority 0
iptables -t mangle -I POSTROUTING  -p icmp -j MARK --set-mark 5

#Priority 1
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 3389  -j MARK
--set-mark 1
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 3389  -j MARK
--set-mark 1

#Priority 2
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 25   -j MARK
--set-mark 2
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 25   -j MARK
--set-mark 2

#Priority 3
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 80   -j MARK
--set-mark 3
iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 80   -j MARK
--set-mark 3

Stanislav Nedelchev

2006-Feb-14 21:26 UTC

head link

Re: Guarantee ICMP respond time ?

Hi Robin ,
I didn''d want to fake ICMP echo_reply i forgot to mention that in this
test i''m pinging my gateway to be shure that ping response is not
bigger
for some other reasonds
i find  that ping response is getting bigger some times with about 10ms
but some times it;s doubles or even more but in most time is like constant.

Here is some data if you find it intresting

with shaper enabled
64 octets from 213.91.166.1: icmp_seq=22 ttl=254 time=30.9 ms
64 octets from 213.91.166.1: icmp_seq=23 ttl=254 time=40.9 ms
64 octets from 213.91.166.1: icmp_seq=24 ttl=254 time=14.3 ms
64 octets from 213.91.166.1: icmp_seq=25 ttl=254 time=14.4 ms
64 octets from 213.91.166.1: icmp_seq=26 ttl=254 time=34.2 ms
64 octets from 213.91.166.1: icmp_seq=27 ttl=254 time=14.2 ms
64 octets from 213.91.166.1: icmp_seq=28 ttl=254 time=14.2 ms
64 octets from 213.91.166.1: icmp_seq=29 ttl=254 time=14.2 ms
64 octets from 213.91.166.1: icmp_seq=30 ttl=254 time=31.1 ms
64 octets from 213.91.166.1: icmp_seq=31 ttl=254 time=14.3 ms
64 octets from 213.91.166.1: icmp_seq=32 ttl=254 time=14.2 ms
64 octets from 213.91.166.1: icmp_seq=33 ttl=254 time=130.9 ms
without shaper enabled
64 octets from 213.91.166.1: icmp_seq=10 ttl=254 time=517.2 ms
64 octets from 213.91.166.1: icmp_seq=11 ttl=254 time=545.4 ms
64 octets from 213.91.166.1: icmp_seq=12 ttl=254 time=573.8 ms
64 octets from 213.91.166.1: icmp_seq=13 ttl=254 time=628.6 ms
64 octets from 213.91.166.1: icmp_seq=14 ttl=254 time=635.3 ms
64 octets from 213.91.166.1: icmp_seq=15 ttl=254 time=666.0 ms
64 octets from 213.91.166.1: icmp_seq=16 ttl=254 time=694.3 ms
64 octets from 213.91.166.1: icmp_seq=17 ttl=254 time=718.1 ms
64 octets from 213.91.166.1: icmp_seq=18 ttl=254 time=746.2 ms
64 octets from 213.91.166.1: icmp_seq=19 ttl=254 time=749.8 ms
64 octets from 213.91.166.1: icmp_seq=20 ttl=254 time=778.1 ms


Hammond, Robin-David%KB3IEN wrote:> well if you want the line to look less conjested to a casual observer
> you can fake the ICMP echo_reply. (best know which hosts are infact
> on-line first). Faking the reply does not preclude actualy sending the
> echo request, but allowing a duplicate (real) reply might look weird...
>
>
> On Tue, 14 Feb 2006, Stanislav Nedelchev wrote:
>
>> Date: Tue, 14 Feb 2006 22:35:40 +0200
>> From: Stanislav Nedelchev <stanislav.nedelchev@gmail.com>
>> To: lartc@mailman.ds9a.nl
>> Subject: [LARTC] Guarantee ICMP respond time ?
>>
>> Hello to all people there .
>> Can i guarantee ICMP respond time no metter how loaded is internet
>> line .
>> i have typical NATed enviroiment   like
>>
>> External IP |linux router| LAN - 192.168.0.0/24
>>
>> i have example setup with IMQ but is it possible to be done also if i
>> attache htb to eth0 and eth1 for example .
>>
>> if i start shaper ping i better that without shaper but it''s
not
>> guarantted i mean response  time is not like constant.
>>
>> Maybe i''m missing something.
>> Is it possible with HTB ot with something else like CBQ ?
>> here is my example setup
>>
>>
>>
>>
>> echo "Loading Traffic Shaper IMQ0 Upload"
>> tc qdisc  del dev imq0 root
>> tc qdisc  add dev imq0 root handle 2: htb default 333 r2q 1
>>
>> tc class  add dev imq0 parent 2: classid 2:2 htb rate 192kbit
>>
>> #ICMP
>> tc class  add dev imq0 parent 2:2 classid 2:30 htb rate 32kbit prio 0
>> tc filter add dev imq0 parent  2:0 protocol ip handle 5 fw classid 2:30
>> tc qdisc  add dev imq0 parent 2:30 handle 30: sfq perturb 1
>>
>>
>>
>> tc class  add dev imq0 parent 2:2 classid 2:24 htb rate 96kbit ceil
>> 160kbit prio 1
>> tc filter add dev imq0 parent  2:0 protocol ip handle 1 fw classid 2:24
>>
>> tc qdisc  add dev imq0 parent 2:24 handle 24: sfq perturb 10
>>
>> tc class  add dev imq0 parent 2:2 classid 2:26 htb rate 32kbit ceil
>> 128kbit prio 3
>> tc filter add dev imq0 parent 2:0 protocol ip handle 2 fw classid 2:26
>> #tc qdisc  add dev imq0 parent 2:26 handle 26: sfq perturb 10
>>
>> tc class  add dev imq0 parent 2:2 classid 2:28 htb rate 16kbit ceil
>> 64kbit prio 5
>> tc filter add dev imq0 parent  2:0 protocol ip handle 3 fw classid 2:28
>> #tc qdisc  add dev imq0 parent 2:28 handle 28: sfq perturb 10
>>
>> tc  class  add dev imq0 parent  2:2 classid 2:333 htb rate 16kbit ceil
>> 128kbit prio 7
>> tc  qdisc  add dev imq0 parent  2:333 handle 333: sfq perturb 10
>>
>> echo "Done"
>>
>>
#-----------------------------------------------------------------------------
>>
>>
#-----------------------------------------------------------------------------
>>
>>
>>
>> echo "Loading Traffic Shaper imq1 Upload"
>> tc qdisc  del dev imq1 root
>> tc qdisc  add dev imq1 root handle 2: htb default 333 r2q 1
>>
>> tc class  add dev imq1 parent 2: classid 2:2 htb rate 192kbit
>>
>> #ICMP
>> tc class  add dev imq1 parent 2:2 classid 2:30 htb rate 32kbit prio 0
>> tc filter add dev imq1 parent  2:0 protocol ip handle 5 fw classid 2:30
>> tc qdisc  add dev imq1 parent 2:30 handle 30: sfq perturb 1
>>
>>
>>
>> tc class  add dev imq1 parent 2:2 classid 2:24 htb rate 96kbit ceil
>> 160kbit prio 1
>> tc filter add dev imq1 parent  2:0 protocol ip handle 1 fw classid 2:24
>>
>>
>>
>> tc qdisc  add dev imq1 parent 2:24 handle 24: sfq perturb 10
>>
>> tc class  add dev imq1 parent 2:2 classid 2:26 htb rate 32kbit ceil
>> 128kbit prio 3
>> tc filter add dev imq1 parent 2:0 protocol ip handle 2 fw classid 2:26
>> #tc qdisc  add dev imq1 parent 2:26 handle 26: sfq perturb 10
>>
>> tc class  add dev imq1 parent 2:2 classid 2:28 htb rate 16kbit ceil
>> 64kbit prio 5
>> tc filter add dev imq1 parent  2:0 protocol ip handle 3 fw classid 2:28
>> #tc qdisc  add dev imq1 parent 2:28 handle 28: sfq perturb 10
>>
>> tc  class  add dev imq1 parent  2:2 classid 2:333 htb rate 16kbit ceil
>> 128kbit prio 7
>> tc  qdisc  add dev imq1 parent  2:333 handle 333: sfq perturb 10
>>
>> echo "Done"
>>
>> #Priority 0
>> iptables -t mangle -I PREROUTING  -p icmp -j MARK --set-mark 5
>>
>> #Priority 1
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 3389  -j MARK
>> --set-mark 1
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 3389  -j MARK
>> --set-mark 1
>>
>> #Priority 2
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 25   -j MARK
>> --set-mark 2
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 25   -j MARK
>> --set-mark 2
>>
>> #Priority 3
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --dport 80   -j MARK
>> --set-mark 3
>> iptables -t mangle -A PREROUTING  -i eth0  -p tcp --sport 80   -j MARK
>> --set-mark 3
>>
>>
>> #Priority 0
>> iptables -t mangle -I POSTROUTING  -p icmp -j MARK --set-mark 5
>>
>> #Priority 1
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 3389  -j
MARK
>> --set-mark 1
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 3389  -j
MARK
>> --set-mark 1
>>
>> #Priority 2
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 25   -j MARK
>> --set-mark 2
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 25   -j MARK
>> --set-mark 2
>>
>> #Priority 3
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --dport 80   -j MARK
>> --set-mark 3
>> iptables -t mangle -A POSTROUTING  -i eth0  -p tcp --sport 80   -j MARK
>> --set-mark 3
>>
>> _______________________________________________
>> LARTC mailing list
>> LARTC@mailman.ds9a.nl
>> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>>
>
>  Microsoft: Where do you want to go tomorrow?
>  Linux: Where do you want to go today?
>  BSD: Are you guys coming, or what?
>
>
> Robin-David Hammond    KB3IEN
>     www.aresnyc.org.
>

Reasonably Related Threads

Search for more seemingly similar threads

LARTC - Feb 2006 - Guarantee ICMP respond time ?

Guarantee ICMP respond time ?

Re: Guarantee ICMP respond time ?

Reasonably Related Threads