similar to: Traffic shaping

Dear all, First, sorry for my bad English .. To night one of my client is the victim of UDP attack from internet. It''s tons of UDP packets from internet with destination to port 80. But when I look at class of that victim client, the actual class rate is over than configured rate class. Below is my screen capture. You can see at class 1:913 which have actual rate 105136bit while

Hello... Im trying to setup HTB to allow me to shape traffic from two upstreams that meets on single lan0 interface. I prefer to use HTB qdisc within HTB root qdisc for cleaner rules design. Seems that it doesnt work at all. tc -s class show doesnt show any traffic on other classes attached to HTB qdisc. Linux 2.6.20.7 iproute-2.6.20-070313 Weird thing is that tc -s class show that 1: and 2:

i am trying to do some traffic classification using the PRIO qdisc and i am having a few problems. I have a root htb class: tc qdisc add dev imq0 root handle 1: htb default 255 r2q 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 768kbit and a child PRIO tc class add dev imq0 parent 1:1 classid 1:99 htb rate 96kbit ceil 600kbit prio 0 tc qdisc add dev imq0 parent 1:99 prio tc filter

Thanks for quick reply Andreas! > Every class is allowed to use bandwidth as long as it does not have to > borrow (the specified rate is guaranteed). Prio in HTB only affects > borrowing bandwidth from other classes... In the example below, the class > 1:5 should be allowed to borrow bandwidth before 1:14 does. Thats exactly what I want from HTB to do..to prio the borrowed bandwidth.

Hi, got a 25/25Mbit connection which is quite stuffed. So I applied htb rules. Uplink: class htb 1:1 root rate 24500Kbit ceil 24500Kbit burst 4661b/8 mpu 0b overhead 0b cburst 4661b/8 mpu 0b overhead 0b level 7 Sent 430600689269 bytes 730147320 pkt (dropped 0, overlimits 0 requeues 0) rate 23057Kbit 5520pps backlog 0b 0p requeues 0 lended: 199673949 borrowed: 0 giants: 0 tokens: -964

An earlier exchange about someone seeing the rate larger than the ceiling is posted below. Andy explained the reason for the "above ceiling" rate in Daniel''s output . . . but I just saw an example that doesn''t fit. >> tc output >> class htb 1:14 parent 1:1 leaf 14: prio 1 quantum 3072 rate 256000bit ceil 282000bit burst 1820b/8 mpu 0b overhead 0b

Dear list, I have the problem that child classes don''t seem to issue the parent class to borrow from their parent. This is a simplified version of my script: tc qdisc del dev $DEV root tc qdisc add dev $DEV root handle 1: htb default 10 tc class add dev $DEV parent 1: classid 1:1 htb rate 10mbit tc class add dev $DEV parent 1:1 classid 1:10 htb rate 1kbit ceil 512kbit #groups tc

I have to match my packets based on MAC address, which I cannot do in the POSTROUTING chain, so I do it in PREROUTING using MARK. Then, I match on the MARK in the POSTROUTING chain to do a CLASSIFY. But this does not seem to work: wireless-r1 bwlimit # iptables -L -v -n -t mangle Chain PREROUTING (policy ACCEPT 3353K packets, 941M bytes) pkts bytes target prot opt in out source

Hi all ! I''m building a network appliance whose goals are to enhance Voip quality on 512/128k DSL links. But, i have a voice quality problem, and i think i''m doing something wrong, but i can''t find what. Please excuse my terrible english, i''m french. >From what i''ve read, tc is the tool i need. I read the documentations, readmes and lartc.org

Hi all: I am getting this error message in my syslog after a few hours of running my QoS. First i suposed it was a memory sims problem, but i have changed them and i have the same problem. Here is the error message: Oct 20 16:52:23 pototogorri /usr/bin/sudo: apache : TTY=unknown ; PWD=/var/www/html ; USER=root ; COMMAND=/sbin/iptables -t nat -D PREROUTI Oct 20 16:52:23 pototogorri

Hello, i made this script : tc qdisc add dev eth0 handle ffff: ingress tc filter add dev eth0 parent ffff: protocol ip prio 1 u32 match ip src 138.96.20.0 police index 1 rate 20000kbit burst 20000kbit drop flowid :1 tc filter add dev eth0 parent ffff:1 protocol ip prio 1 u32 match ip src 138.96.20.23 police index 2 rate 15000kbit burst 15000kbit drop flowid :2 tc filter add dev eth0 parent

Hi,All I am using iproute2 to manage bandwith for ADSL router.High,medium,low priority are needed for different protocol port on the ADSL's upstream side,as following: LAN --- |ADSL Router|------WAN When there aren't traffic on the specific priority, its bandwidth should be borrowed by other priorities.But it doesn't work.Here is my script: /usr/sbin/tc qdisc del dev nas0 root

Hi, I''m looking for a script in order to do traffic control on a ciber cafe LAN, with linux router. Ciber has about 40 hosts, and I haven''t much bandwidth (512kbit). Also, I''ve a squid cache and it works very good! I''ve found Jim QoS script, and FairNat. Which is more suitable for me ? Jim QoS ? FairNat ? other ? If I put FairNat, I would need ZPH patch

My hfsc rule .. tc qdisc add dev eth2 handle 1: root hfsc iptables -t mangle -N ms-all iptables -t mangle -N ms-all-chains iptables -t mangle -N ms-prerouting iptables -t mangle -A PREROUTING -j ms-prerouting iptables -t mangle -A ms-prerouting -j CONNMARK --restore-mark iptables -t mangle -A ms-prerouting -p udp --dport 4444 -j MARK --set-mark 1 iptables -t mangle -A ms-prerouting -p udp -m

Hi guys I have a config as follows for one of my networks. I want to give the xxx.xxx.xxx.xxx/xx network 64kbit for everything from the internet but 8000kbit from our internal servers on yyy.yyy.yyy.yyy/yy network. It does not work. I only want to use u32 filters. I think what's happening is the first flowid of 1:21 is catching them and not getting to the 1:40 flowid. Is this right? The box

I am completely new to this.. I am trying to make simple traffic control.. I have read quite some manuals and posts that i found, but i don''t understand much, i think.. My situation is: i have linux server which i am using for firewall for local network.. also on same linux server i have torrentflux for downloading torrents.. What i want to do is to give priority to local clients(2-3

Hello, with the command : tc filter add dev eth0 parent ffff: protocol ip u32 patch ip src 192.168.2.6police rate 10000kbit burst 10000kbit drop flowid :1 we can limit traffic coming from 192.168.2.6. I would like: for 192.168.1.2, 192.168.1.4 limit to 10mbit for 192.168.1.3, 192.168.1.5 limit to 20mbit other ip would have no limit. Is it possible with tc ? Regards Olivier.

Hello all, I have set my QoS solution and now I am facing a little problem... When I ping to my server it has some lost packages: Estatísticas do Ping para 172.30.0.1: Pacotes: SENDED = 1029, RETURNED = 880, LOST = 149 (14% de perda), Aproximar um número redondo de vezes em milissegundos: Mínimo = 0ms, Máximo = 686ms, Média = 105ms If I disable my QoS ping stats to be ok. I even have

Hello all, I am with a doubt about QoS solution... I have a 4 Mbit backbone coming from the telco I use... This is the link I serve to my clients, so I make this classes: $TC qdisc add dev $DL root handle 1: htb default 60 CLASS="/sbin/tc class add dev $DL parent" $CLASS 1: classid 1:1 htb rate 4096Kbit $CLASS 1:1 classid 1:10 htb rate 256Kbit ceil 3072Kbit burst 15k $CLASS 1:1

Hey, I have such a script: tc qdisc add dev $DEV root handle 1:0 htb default 21 r2q 2 tc class add dev $DEV parent 1:0 classid 1:11 htb rate 100mbit tc class add dev $DEV parent 1:11 classid 1:21 htb rate 512kbit ceil 512kbit tc class add dev $DEV parent 1:11 classid 1:23 htb rate 1024kbit ceil 1024kbit tc class add dev $DEV parent 1:11 classid 1:25 htb rate 3072kbit