Hi, I have a Debian that is connected to Internet in eth0, and to a LAN in eth1. I wanted to control traffic with HTB, dividing it depending on what kind of traffic is (Mail, Application Server and others). Would it be good to use HTB qdisc in eth0 egress to control outgoing traffic and HTB qdisc in eth1 egress to control incoming traffic? Or the only way to control incoming traffic is with eth0 ingress? Thanks very much, tizo
On Monday 14 August 2006 17:21, Andrés Ghigliazza wrote:> Hi, > > I have a Debian that is connected to Internet in eth0, and to a LAN in > eth1. I wanted to control traffic with HTB, dividing it depending on > what kind of traffic is (Mail, Application Server and others). > > Would it be good to use HTB qdisc in eth0 egress to control outgoing > traffic and HTB qdisc in eth1 egress to control incoming traffic? Or > the only way to control incoming traffic is with eth0 ingress?INET-eth0-Router-eth1-LAN in eth0 egress htb qdisc(you shape uplink here) in eth1 egress htb qdisc(you shape downlink here) this feets perfectly if it is the LAN traffic the one you whant to shape. If it is the traffic from the server itself you will need an ingress policy in eth0. -- Luciano
> > INET-eth0-Router-eth1-LAN > > in eth0 egress htb qdisc(you shape uplink here) > in eth1 egress htb qdisc(you shape downlink here) > > this feets perfectly if it is the LAN traffic the one you whant to shape. If > it is the traffic from the server itself you will need an ingress policy in > eth0. >Hi Luciano! Can you help me for use only one interface for upload/download? Is it possible shape traffic with " ingress policy " ? I haven''t found documents for this policy. Thanks! Sim
El Monday 14 August 2006 18:17, Sim escribió:> > INET-eth0-Router-eth1-LAN > > > > in eth0 egress htb qdisc(you shape uplink here) > > in eth1 egress htb qdisc(you shape downlink here) > > > > this feets perfectly if it is the LAN traffic the one you whant to shape. > > If it is the traffic from the server itself you will need an ingress > > policy in eth0. > > Hi Luciano! Can you help me for use only one interface for upload/download? > > Is it possible shape traffic with " ingress policy " ? > > I haven''t found documents for this policy.This is LARTC mailing list and the first document to attend before posting a FAQ is to read the LARTC HOWTO. All from LARTC: http://lartc.org/howto/lartc.adv-qdisc.ingress.html http://lartc.org/howto/lartc.adv-filter.policing.html with examples like: http://lartc.org/howto/lartc.cookbook.synflood-protect.html Alternative you can use imq: http://lartc.org/howto/lartc.imq.html RTFM! (sorry can''t avoid that :-P) -- Luciano