similar to: Classful queuing solution

Dear all, I am trying to set up multi-user traffic control. In short, I want each user to be hard limited to 128kbit download and 64kbit upload. On top of that, I want interactive traffic (ICMP, ACK packets, SSH, etc) to be prioritised to minimise latency. It sounds like it ought to be done with a classful qdisc but I don''t really know what I''m doing. I think I want

Dear all, I''m having real problems getting tc to do anything useful at all. I''m also under pressure to get this fixed before the students start arriving later this month (I work in a university). In short, I want each IP address to be hard limited to 128kbit down, 64kbit up, never to be allowed more bandwidth than this. It is also important that the latency remains

Hi everyone, I''m new to tc but I need to use it to set up shaping on a new NAT box. In short: Each user must have their upload limited to 128kbit and downlink limited to 256kbit. Global bandwidth to be limited to 100Mbit Interactive packets to have higher priority 200+ users, so need to match packets fast So far I have managed to get the download limits working. However I need to

OK, I''m stumped. I''ve read through most of the LARTC HOWTO and have yet to find a basis for what I need to accomplish. I have a Linux box that controls access to and from the Internet at my workplace. We have a number of remote employees that connect via PPTP and IPSEC to the office''s internal network. Some of these remote employees are currently using SIP phones.

Hi all, I''m looking for the best way to set up a Linux router with "tc" to limit the incoming bandwidth my ISP''s clients use. Please assist me with the following: Diagram: INTERNET | | | |eth0 ----------- Linux router/shaper |eth1 | | | --------------- Clients1(64k)/2(128k)/3(64k)/... Clients normally purchase bandwidth in bundles of

Hi all. Since I move on to 2.6 kernel , filter ingress policy based on nfmark won´t work. Sorry for my english. Simple example: iptables -t mangle -I PREROUTING -j MARK --set-mark 1 ${QDISC_ADD} handle ffff: ingress ${FILTER_ADD} parent ffff: protocol ip prio 100 handle 1 fw \ police rate 128Kbit burst 10k drop flowid 2:11 # tc -s -d qdisc ls dev eth0 qdisc ingress ffff: ----------------

Hey, I have such a script: tc qdisc add dev $DEV root handle 1:0 htb default 21 r2q 2 tc class add dev $DEV parent 1:0 classid 1:11 htb rate 100mbit tc class add dev $DEV parent 1:11 classid 1:21 htb rate 512kbit ceil 512kbit tc class add dev $DEV parent 1:11 classid 1:23 htb rate 1024kbit ceil 1024kbit tc class add dev $DEV parent 1:11 classid 1:25 htb rate 3072kbit

Hi everybody! I''m using an edge bridge box with two ethernet cards to shape traffic in a WAN link. I''m running Debian 3.1 stable with kernel 2.6.8 and iproute from packages. I recompiled the kernel with the following built-in options: [*] 802.1d Ethernet Bridging [*] QoS and/or fair queueing <*> HTB packet scheduler <*> SFQ queue [*] QoS support

Hello! I have an internet connection of 64kbps garanteed in a channel of 256kbps. On this connection the metropolitan speed is 10Mbps and in the provider''s network the speed is 100Mbps. I have a few clients behind my linux box and i want to set up some limitations because some of them are using it irrational. I am marking the packets with 0 for internet; 1 for metropolitan 2 for

Hi, The default settings for celtclient are:- Sampling rate 48000 Frame size 256 Packet size 43 According to my calculations this should give a bitrate of 64kbit/sec + a little extra for the 32bit time stamp and 4 null byte pseudo header. Using vnstat I was very surprised to see that it was reporting a bitrate usage of around 16kbyte/sec which is 128kbit/sec, double what I was expecting. I

I have: tc qdisc add dev imq0 root handle 1: htb default 30 tc class add dev imq0 parent 1: classid 1:1 htb rate 512kbit ceil 512kbit tc class add dev imq0 parent 1:1 classid 1:30 htb rate 64kbit ceil 512kbit then: iptables -t mangle -A PREROUTING -i ppp0 -s 192.168.2.2 -j IMQ --todev 0 tc class add dev imq0 parent 1:1 classid 1:22 htb rate 64kbit ceil 128kbit tc filter add dev imq0 protocol

Hi perhaps someone else already had the same problem. Problem description: I''m running a class B University network with approx 10k hosts attached. I would now like to stop traffic from and to hosts in my network not already registered in my DNS server. This means I''ve to handle with approx 50k rules|routes. Sure I can summarize the unalloctaed address space a little bit with

hello all, i got my htb running and controlling my bandwidth right, but i have a doubt. i configured HTB to limit my class 192.168.0.0/24 to 128kbit. but i want 128kbit for *each* machine on this class, and not for the entire class. when 2 machines in 192.168.0.0/24 are downloading one file, they share the 128kbit bandwidth between them, using 64kbit for each. why i can get all machine on this

Hi, I''m trying to police ingress traffic based on port numbers and IP addresses. The u32 match based on IP addresses seems to work without issues and I''m am able to police incoming packets. However, the same isn''t working with u32 matches based on TCP port numbers. For port numbers, I added exactly one ''u32 match'' rule: common for both: # tc qdisc add

Hi All, I''m using HTB to shape traffic, a little like this: tc qdisc add dev eth2 root handle 1:0 htb tc qdisc add dev eth3 root handle 1:0 htb tc filter add dev eth2 parent 1: protocol 0x8100 prio 5 u32 match u16 3000 0x0fff at 0 flowid 1:1 action ipt -j MARK --or-mark 0x01000000 tc filter add dev eth3 parent 1: protocol 0x8100 prio 5 u32 match u16 3000 0x0fff at 0 flowid 1:1 action

Hello, I wrote a simple traffic shaping script (below) that should have allowed me to shape my internet traffic a bit (ppp0 - adsl 128kbit/64kbit; local interface eth0). The script works only partially - the speed is being limited but too much. Without running this script my download rate is about 10kBytes (with second computer also downloading at about 6kBytes). After running it my download speed

[ -netters, please Cc me or security@ with replies. ] I'm running into trouble integrating dynamic racoon-based IPSec into a network with ipfw and natd. I need to be able to allow VPN access from any address from authenticated clients. I've got the dynamic VPN working, with racoon negotiating SAs and installing SPs, but the problem is that I can't tell whether an incoming packet on

Hello I am trying to redirect all http traffic of unauthorized wifi users on a wireless hotspot to a login page. The problem I have is that I can not disable the regular address translation (I want the source address to stay the same). 10.0.0.7 is the wifi client 195.250.155.29 is the web wifi user tries to access from his browser 195.113.17.94 is my login page 10.0.0.1 is the wifi

List I need some help, advice or just a starting point on the following situation: Link A - 64kbps leased line Link B - 512kbps ADSL line Is it possible to have Link A saturated constantly and have the excess traffic "spill over" onto Link B? I know it''s possible to have packets sent down links in a round-robin fashion and I''ve read in the howto on load sharing

Hi folks, So, I have a pretty simple setup - a linux router machine running as a firewall/router for a small neighborhood LAN (approx 20 machines). I also have squid running on the box in non-transparent mode, and also I have set up NAT for TCP/UDP ports above 1024 for all clients and SSH/POP/SMTP/CVS NAT''d for selected ones based on MAC filtering. No hosts whatsoever can access ports 80