Displaying 20 results from an estimated 10000 matches similar to: "lartc doc and Jamal''s iproute2 notes"
2007 Mar 28
1
traffic shaping with NAT: IFB as IMQ replacement?
Hello,
Sorry for the many Ccs, but I hope to reach all parties involved.
I want to do traffic shaping with NAT and I wanted to do it with IFB
instead of IMQ [1]. I tried a lot of things but now I am stuck (and
maybe confused).
The setup:
eth0 eth1
WAN/(Internet) <-> Linux Router <-> LAN
Linux router:
- does NAT for the LANs
- runs local processes
2007 Sep 19
7
ifb and ppp
Hello!
My goal is to setup an ingress traffic shaping on my PPPOE DSL line with ifb.
My old imq stuff used iptables marks (like ''iptables -t mangle -A
PREROUTING -p tcp --sport 22 -m length --length :500 -j MARK --set-mark 31'')
to classify the traffic and since i am lazy, i tried to to reuse them with
ifb. But no luck: iptables marks the packets well, but tc
2004 Apr 13
0
FWD IMQ mail on netdev
>From netdev@oss.sgi.com:
----- Forwarded message from jamal <hadi@cyberus.ca> -----
X-Original-To: sebek@localhost
X-Received-Date: Mon, 12 Apr 2004 03:25:37 +0200 (CEST)
Subject: (Long) ANNOUNCE: IMQ replacement WAS(Re: [RFC/PATCH] IMQ port to
2.6
From: jamal <hadi@cyberus.ca>
Reply-To: hadi@cyberus.ca
To: "Vladimir B. Savkin" <master@sectorb.msk.ru>
Cc:
2006 Oct 28
1
connmark on ifb interfaces
Hello
I''m trying to switch from IMQ to IFB but I have a problem with traffic marked
by ipp2p module. Looks like when traffic is redirected from ethX to ifbX it
looses information about MARK.
Here''s what I do to get ingress traffic to go to ifb interface:
$TC qdisc add dev eth1.42 ingress
$TC filter add dev eth1.42 parent ffff: protocol ip prio 10 u32 \
match u32 0 0
2006 Jul 02
3
IFB working
How to use IFB as replacement of IMQ
There is not much documentation about it
Please explain with example
--
Failure seldom stops you. What stops you is the fear of failure.
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
2011 Feb 22
0
Re: iproute 2010-2011 - tree problem (udp, quid, action police + action mirred)
On Tue, 22 Feb 2011 11:15:39 +0100
"PIOTREK H." <komarekmz@tlen.pl> wrote:
> Welcome
>
> I have a problem with the new iproute "iproute2-2.6.37.tar.bz2 07-Jan-2011 9:18 (the problem from version 2010 to 2011).
> Three problems:
> a) with filters for UDP traffic
> problem affects only the queuing traffic to the machine on which you work qos
> In the case
2007 May 31
5
IFB & 802.1q
Hello
What I''m looking for is how to configure the Linux QoS module to do
global rate limitation for two (or more) 802.1q pseudo network devices.
I naturally suppose there is a possibility with IFB. I don''t want to use
IMQ because it''s not integrated to my kernel v2.6.21.1 and I didn''t find
IMQ patches for it nor for the iptables package I use (v1.3.7).
2006 Mar 06
1
complex; ifb, masq et omnia
Hi all.
I''m using Jamal''s ifb virtual interface from new kernel. Redirecting incoming
traffic from external interface like that:
# tc [blahbla] match u32 0 0 flowid 1:0 action mirred egress redirect dev ifb0
to ifb to shape it.
The problem is that I''m using MASQUERADE by netfilter also. That redirected
traffic coming from internet gets to ifb _before_ DNAT is done.
2006 Apr 09
10
Trying to do some very simple ingress limiting, no success
Hi,
I am trying to do some simple ingress limiting based on fwmark. I know
the ability and sense to do INGRESS limiting is ehm... limited ;-) but
still I want to try it.
I tried several things.
=== 1 ===
tcq ingress handle ffff:
tcf parent ffff: protocol ip prio 1 handle 1 fw police rate 12mbit burst 10k drop
tcf parent ffff: protocol ip prio 1 handle 2 fw police rate 10mbit burst 10k drop
2004 Jan 27
1
RE: LARTC digest, Vol 1 #1558 - 9 msgs
Hi Roy,
Strange. "kernel will resend then together with new ones" - this is
interesting, since the firewall DOES know how to drop locally generated
packets and the kernel doesn''t attempt to retry them. I am not an expert
on this, but I think it might be interesting to check how the firewall
does this. Another option would be to trick the kernel that the packet
has been
2007 Dec 12
1
Re: LARTC Digest, Vol 34, Issue 12
Hey Marek,
I´know that i must to works whith the INGRESS (instead of EGRESS), i´ve well
formed my kernel. My others TC rules for source IP address (not for MAC
address) does work fine...!!!, the problem is whith the MAC because is a not
"IP PROTOCOL" and for that i must to use the "u32/u16 match" to solve it,
and if i make an analogy from my others INGRESS rules applied to Src
2006 Jul 08
3
IFB vs IMQ
Is IFB realy replacement of IMQ
Please Guide
--
Failure seldom stops you. What stops you is the fear of failure.
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
2006 Dec 06
19
Iptables matching on IFB
Hey folks,
I stumbled across the Mastershaper project
( http://www.mastershaper.org/ ) but I have a little problem:
I wanted to shape the traffic coming from the router itself aswell as
coming from the LAN behind the router, for that task I need IMQ, but
with IMQ iptables-(layer7)-matching is not possible. Now I''ve talked
with the programmer and he said the following:
>The problem is
2006 Jan 10
2
Shaping traffic bound for the NAT''ed networks whithout imq
I''m trying to set up a shaper that can shape the inbound traffic to around
40 subnets, that hang on 3 different interfaces of the router.
As Linux can''t do ingress shaping I''m left with having to set up 3
seperate shapers, one for each internal interface.
This is not completely optimal as I''ll have to limit each of the 3
interfaces to 1/3 of the total
2006 Aug 08
4
Info about IFB
Hi, I''m looking for info about IFB devices and how I can use it to
incomming traffic shapping.
Has IFB any web about it?
Do any body known where I can find more info about it?
I found this:
http://linux-net.osdl.org/index.php/IFB
But I can''t stand fine how to use it to allow many ifb''s devices or how
to use it with "tc actions".
Any help?
Thanks
--
2006 Aug 04
2
IFB support in 2.6.17 kernel
Hi,
I''m trying to activate IFB device support in a 2.6.17 kernel from Debian
Sid. I read that IFB device is the replacement for IMQ device, but I haven''t
found any useful documentantion on how to activate this feature and the
kernel documentation lacks of this information. I remember that IMQ could be
activated in the ''Network devices'' menu in 2.6.8 kernels,
2007 Jan 30
2
dev IFB, few questions
I''ve made some tests...
eth2 is my internal interface, LAN is connected here.
Before I had IMQ device in AB mode...
PREROUTING [A]fter NAT, POSTROUTING [B]efore NAT.
I want the same situation on ifb.
I do this in this way:
---
# incoming traffic here from LAN is before NAT
tc qdisc add dev eth2 handle ffff: ingress
# outcoming traffic here from WAN is after NAT
tc qdisc add dev eth2
2005 Jan 12
0
Test version of iproute2
There is an new version of iproute2 for testing.
http://developer.osdl.org/dev/iproute2/download/iproute2-2.6.10-ss050112.tar.gz
Mostly simple merges, but could have some issues.
Jamal did I get everything you sent?
[Masahide Nakamura]
ipmonitor shows IPv6 prefix list notification
update to iproute2 xfrm for ipv6
[Stephen Hemminger]
fix compile warnings when building 64bit system
2005 Jan 25
0
[ANNOUNCE] iproute2 (050124) release
Thanks to the work of Jamal and Thomas; here is an update to iproute2.
http://developer.osdl.org/dev/iproute2/download/iproute2-2.6.10-ss050124.tar.gz
Changes since last version:
[Yun Mao]
fix typo in ss
[Thomas Graf]
tc pedit/action cleanups
add addraw_l
rtattr_parse cleanups
[Jamal Hadi Salim]
typo in m_mirred
add support for pedit
[Jim Gifford]
Fix allocation size error in nomal
2006 Sep 07
1
Rate limits whithin rate limits
Hi all,
I''m sure I''m soing something wrong here.
I am trying to set up a rate limit inside another rate limit.
eg. I have a 512K rate limit on a particular VLAN. I am using an IFB so
that packets passing through the bridge are counted at each port.(ie the
throughput is limited to 512K, not just the traffic in one direction.)
This part works OK, but I also want to limit a