similar to: throwing away unclassified traffic

A Linux gateway has two interfaces: eth0, with a routable address on an ISP''s network, and eth1, which is 10.0.0.1 on a private network. There are several hosts connected to eth1, and these are allowed to send packets out of eth0 only after they login via a form at http://10.0.0.1. Once a host logs out, the gateway should no longer route packets for it. Each host also has a specific

Hi. I''m wondering if there''s a good way to configure a Linux firewall box to failover to a single backup server, while preserving connection state. This question has been asked before, but the latest reference I can find is from 2004, at which time Linux had no equivalent of OpenBSD''s pfsync, though Harald was said to be working on one. Did anything come of those

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

Hi everyone, I''m new to tc but I need to use it to set up shaping on a new NAT box. In short: Each user must have their upload limited to 128kbit and downlink limited to 256kbit. Global bandwidth to be limited to 100Mbit Interactive packets to have higher priority 200+ users, so need to match packets fast So far I have managed to get the download limits working. However I need to

Hi. I am having shaping traffic using tc, I have been trying for a very long time, and I just didn''t get it to work the way I want it. I will really appriciate it if you experts will have a look at my script and tell me what I do wrong. First, I`ll describe my envornment, than my requirements. I run a small server on Debian etch with kernel version 2.6.7. the server ip is 10.0.0.2 I

Hello, I''m trying to get lossless VoIP traffic over my 3000k/500k ADSL line. Shaping outgoing traffic is no problem: I set total ceil for outgiong device (ppp0) to 450kbit and put VoIP into highest prio class. Even during full upload the voice is clean on the other end. Now I tried to get the same result for incoming data. I attached HTB to eth1 where the incoming voip traffic is

Does anyone have experience with using HTB to shape traffic for several thousands of users, each with a class of their own? The LARTC HOWTO has a section about setting up hashed filters to deal with "many" classes. Has anyone used that setup? -- ams

Hi, I have a rather simple problem I have to solve, well I thought it would be simple, I''ve run into a problem. I think I must be missing something fundamental. I am trying to build a Linux router that simply throttles everything down to certain bandwidths. That is, no priority queuing ...etc, just slow all traffic down to the specified rates, which are 64,128,256,512 kbit. We want

I cannot get HTB to function properly. Most classes transmit more than their ceiling, more than any reasonable burst would allow. I have reviewed my script several times but I can''t find anything out of place. The setup is as standard as it gets: one HTB root qdisc, a small tree of HTB classes, one SFQ qdisc for each leaf HTB class. To illustrate the problem, here is non-leaf HTB

Hi! I have configured traffic shaping with htb and imq but when i am downloading the latency for example on the Bnet class is very high ..... example: 65 kb/s download best latency: 56ms lateny on bnet class while downloading: 400 350 250 350 400 100 300 200 80 200 300 250 ..... To get informations about latency i am marking ping packets with iptables. I want to play during other users

I am using HTB for traffic shaping, my scenario is Eth1 is my local interface and I wan to shape bandwidth for IP 172.16.173.245. Now I want if any request from above IP comes its get 1mb speed and all others get 96kb speed, for this setup I make following script but it does not work. Can anyone help me ? htb script -------------- tc qdisc del dev eth1 root 2> /dev/null > /dev/null tc

Hello all, I am providing broadband service through DVB circuit. I have 4KB uplink and 32KB downlink. I want to share 32KB downlink bandwidth among 192.168.0.0/24 (20 users in this subnet i.e 192.168.0.2-192.168.0.22)subnet where each user will get 2KB to 6KB bandwidth. And from 4KB uplink bandwidth each users will get only 1KB to 2KB bandwidth.

hi all, my system with kernel 2.4.16 & 2.4.17( RH-7.2) has netfilter-1.2.4, iproute-ss010803, squid, dns with 4 ether cards.i am trying a simple situation where i want to shape traffic all the interfaces. at present iam using netfilter to allow a few ips, using transparent squid & iproute to limit bandwidth. i feel i must give more bandwidth for my local servers for my office &

I''m trying to shape traffic on a Devil-Linux box. This note was originally sent to their maillist, because the LARTC list appears to have been down for the past few days. My mailbox was just flooded with a half dozen or so confirmation requests in response to my repeated attempts to subscribe to this list. ---------- Forwarded message ---------- From: drew einhorn

Hello! I have a small home network and I''d like to use traffic shaping because every time someone uploads a file at full speed, my download speed drops to ~10 KB/s. My connection is 768/128 DSL. I found a script at http://www.knowplace.org/shaper/examples.html $TC qdisc add dev $INTERFACE root handle 1: htb default 60 $TC class add dev $INTERFACE parent 1: classid 1:1 htb rate 116kbit

hi there, is there any possible way to control traffic in child??? class with selected protocols for example http i try to use this script but its now working in theory: there is root class 1:0 with subclass 1:2 in class 1:2 all ip adresses have their bandwidth limit 1:{iden} and now i try also control bandwith in this class i.e. if class 1:{iden} have 190kbit i want 95kbit with burst to 190kbit

I've been using tc/htb for network control previously to control bandwidth available to different services running on their own IPs on a unvirtualized host. Now, I have put them into their own guest VM. I would like to be able to do something similar to ensure the more crucial service gets more bandwidth as well as ensuring ssh always get reserved bandwidth. However, when I try the good old

Hello everyone. CONFIGURATION DESCRIPTION: I have a linux box doing masquerade for two lan''s. Here is a piece of mine network config: eth0 : ISP , one public ip address (DSL modem) eth1 : lan , private network address fe: 192.168.4.0/24 eth2 : wlan access point performing as lan2wlan bridge , private network addes fe. 192.168.67.0/24 This box use 2.6.20 kernel with iptables-1.3.8

Hi there list, I got stuck when making tc rules to divide bandwidth between RDP client and the rest of our Internet traffic. Given the following problem: We have a school with around 900 students and staff in a temporary location (an old wodka factory ;)) on around 100 workstations. The maximum bandwidth we could get was 1536 kbit. So we decided to let the staff work in our normal network via

I''m admin of 50 clients. Sometimes I upgrading my internet traffic shaping script. I think rules of inetrnet traffic shaping is very important thing! I would like to ask some help from people, who understand something about SQUID ZPH and TC, to aim beter internet traffic shaping scripts. Squid has ZPH suport, becouse its responds to such commands as: zph_tos_local 8 zph_tos_peer 0