Displaying 20 results from an estimated 4000 matches similar to: "traffic shaping with two internal interfaces"
2008 Mar 05
2
Shorewall & IFB
Hello Tom!
After i read and analyze some docs about IFB i decide that for implement
this feature in Shorewall not need more efforts (of course i may be wrong).
If we have 'ifb0' device then we must activate ingress discipline on real
device (f.e. eth2) and redirect 'egress' from it to 'ifb0'.
tc qdisc add dev eth2 ingress
tc filter add dev eth2 parent ffff: protocol ip
2012 Sep 27
5
Understanding IFB
I''m experiencing a problem with masquerade downloads saturating my
internet connection. I''ve implemented an IFB and now am looking into
flow keys. Although I''ve read the documentation, I''m not sure I have
this right. Can someone help?
/etc/shorewall/params:
MID_IF=eth0
MID_IF_TC=1
INET1_IF=eth1
INET1_IF_TC=2
INET1_IFB_IF=ifb0
INET1_IFB_TC=3
Note: MID_IF
2006 May 14
6
How do I limit download speed by ip address on the LAN?
Hello there,
I can modify /etc/shorewall/tcdevices to control overall IN-BANDWITH. It is quite effective. Just change 2mbit to 128kbit.
However, how do I limit download speed for a certain host IP on the LAN? I want to limit host 192.168.1.140 download speed to 128Kbit. Other hosts on the 192.168.1.0 LAN can still surf at 2mbit.
Any input welcome.
Kind Regards,
Michael
2007 Aug 15
28
traffic shaping
I try use setup traffic shaping with Shorewall-4.0.2 and have fault.
When i start Shorewall with tc-files configured i get follow messages:
...
RTNETLINK answers: No such file or directory
We have an error talking to the kernel
ERROR: Command "tc filter add dev eth2 parent ffff: protocol ip prio
50 u32 match ip src 0.0.0.0/0 police rate 500kbit burst 10k drop flowid
:1" Failed
2006 Mar 30
3
Difficulty in configuring QOS
Hi,
I''m trying to configure QOS , but I''m don''t have success.
My files:
#/etc/shorewall/tcdevices
#INTERFACE IN-BANDWITH OUT-BANDWIDTH
eth0 256kbit 256kbit
eth1 256kbit 256kbit
eth2 256kbit 256kbit
#/etc/shorewall/tcclasses
#INTERFACE MARK RATE CEIL PRIORITY OPTIONS
eth1
2006 Mar 03
3
tcdevices Error
Version 3.0.5 with the two-devices setup (eth0 - net, eth1 - loc).
Kernel 2.4.29
tcdevices, tcrules, and tcclasses are clones of the wondershaper example
(http://www.shorewall.net/traffic_shaping.htm) with eth0 replacing ppp.
With TC_ENABLED=Internal in shorewall.conf:
----
Validating /etc/shorewall/tcdevices...
Validating /etc/shorewall/tcclasses...
ERROR: device A seems not to be
2012 Sep 20
1
Debian Lenny very simple traffic shaping not working
Hi,
I am trying to do the simplest configuration of traffic shaping.
So I did:
shorewall.conf
TC_ENABLED=Simple
tcinterfaces
eth0.2 External 500kbit
tcdevices
eth0.2 500kbit 200kbit
And I am testing the speed on that interface - whether I did it ok or not,
and my speed is still 4mbit/512kbit.
So the question is - How to reduce the speed on interface connected
2013 Sep 16
7
Rsync rules for Shorewall
Hi folks,
I''m having an issue with rsync between my firewall and an internal
box. It seems to be a shorewall issue (or correctly speaking, an
issue with my shorewall config) because if I disable shorewall my
rsync works fine.
And I just can''t find it documented anywhere what I need to do.
I have rules like this :
root@userver:/etc/shorewall# grep -i Rsync rules
2006 Mar 09
3
Shaping questions
Hello Shorewall users,
I have some questions I am hoping someone can answer. I have searched
around the archives but so far I have been unable to find answers. I
am trying to configure traffic shaping on my router/firewall box
running Shorewall 3.0.5/kernel 2.4.31 and have run into some
problems/questions.
My basic set up is: 1500/256kbit ADSL (PPPoE/ppp0) -> Shorewall box
2008 Apr 21
1
Traffic Shaping
I have tried to follow the HOWTO''s as best I could to add some traffic
shaping to my existing shorewall firewall/router.
What I am trying to achieve
Top priority to all voip traffic, regardless of sip, iax2 etc.
Higher priority for interactive traffic - ssh, http
General queue for everything else, but
A low priority queue for any ipp2p traffic
What I have achieved.....
Almost
2007 Mar 13
1
Shorewall and QoS => VoIP Help please
Hi
i want see if my QoS are good because i am not very sure ... the VoIP
quality are not very good when i download.
I have on my Linux routeur/Firewall Asterisk .. and i have into my config :
================================================
tcdevices:
eth0 2000kbit 2000kbit
tcclasses:
eth0 1 100kbit 180kbit 1 tos=0x68/0xfc,tos=0xb8/0xfc
eth0 2 full/4 full
2009 Aug 26
2
shaping torrent traffic
hi
who can ever help me out with the shaping of torrent traffic?
i have a pptp at ppp0 over eth0 (10.0.0.1/8)
i would like to shape outgoing traffic of rtorrent on these two
interfaces, assume rtorrent is running at port 6999
need 3mbit for ppp0 and 50mbit for eth0
i supposed:
[tcclasses]
ppp0 1 2mbit 3mbit 1
eth0 2 20mbit 50mbit 2
[tcrules]
1 0.0.0.0/0 0.0.0.0/0 tcp
2007 Jan 04
3
TC again - now working on VPN traffic
Hi!
It''s me again bothering you guys, what I want to do is to give full
bandwidth to VPN traffic and limit the rest to 30KB/s (kilobytespersecond),
ok?
Here''s what I have:
tcclasses
##################################
eth0 1 1kbps 70kbps 1
eth0 2 1kbps 30kbps 2 default
eth1 3 15kbps 10000kbps 1
eth1 4
2012 Aug 29
2
tcclasses matching on the TOS field
Hello,
I am trying to set up traffic shaping/control for my voip connection.
I am running 4.4.22.3. Here is my current configuration:
--- tcdevices ---
#NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED
#INTERFACE INTERFACES
eth1 2048kbps 1500kbps
-- tcclasses ---
#INTERFACE:CLASS MARK RATE: CEIL PRIORITY OPTIONS
# DMAX:UMAX
eth1 1 100kbps
2006 Jan 31
5
Traffic Shaping and Bridge
Hi All,
I''m using Shorewall 3.0.4 and I''m wondering if it is possible to do
traffic shapping on only one interface from a bridge.
The firewall has got 3 NIC, eth0, eth1, eth2.
eth0 and eth2 are bridged, but if I''m right, when you specify a traffic
rate for a link, you do it for the interface. In my case, eth0 and eth2
do not appear in the interface file, but it is
2009 Oct 23
9
sip/iax problem - udp conntrack entries not getting destroyed
Hello all,
I have an asterisk sip/iax peer behind a linux gateway doing nat. I''m using
pppoe with a dynamic ip that changes frequently.
The problem is when the line drops the sip/iax registrations drop as well,
and they don''t register thereafter. When I check the conntrack entries, I
noticed the entries still have the old wan ip address and because of
keepalive (i''m
2006 May 01
1
Traffic Shaping with Shorewall
Does anyone here implement traffic shaping with shorewall? I need to shape
BitTorrent traffic on my network so that upload/downloads do not overwhelm
normal function or, even more importantly, my imminent conversion to VOIP for
all telephone service. I followed the shorewall documentation guide but am
not sure if what I have done is the Right Way Of Doing Things. Nor am I
satsified with the
2009 Oct 07
2
iptables-apply analogous
Hello *,
a simple question.
Is there something similar to iptables-apply in shorewall?
ciao,
a.
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead
2009 Aug 29
10
Combatting DDoS attack
Hi,
I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients.
They''re hitting one specific IP address, but coming from thousands of external IP addresses.
I use:
shorewall-4.0.10-3.noarch
How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference.
If
2007 Mar 28
7
(no subject)
Hi all,
I''m having a hell of a time getting my IFB to work. I know I''ve done
this before, so I''m missing something stupid. Can anybody tell me what
it might be?
Configs as follows:
--------
#!/bin/sh
modprobe ifb numifbs=1000
modprobe act_mirred
modprobe 8021q
brctl addbr br0
brctl setfd br0 0
brctl stp br0 off
brctl addif br0 eth1
brctl addif br0 eth2
ifconfig eth1