similar to: traffic shaping vpn (GRE) traffic

Hello. I have a 1024/256kbit ADSL and tried to shape outgoing traffic in order to improve latency. Here is my config. UPLOAD_RATE="256" UPRATE="$[4*$UPLOAD_RATE/5]" (a little smaller) UP70="$[7*$UPRATE/10]kbit" UP30="$[3*$UPRATE/10]kbit" UP20="$[2*$UPRATE/10]kbit" UPRATE="${UPRATE}kbit" IF="eth2" IPTABLES="iptables -t

Hi, complete newb and I apologise for it. I have a setup where my linux box has multiple broadband connection where I am routing certain things over certain interfaces, currently 2 links eth2 is a 1500/256 and eth3 is a 512/512, eth0 is the link to the LAN for users. What I am trying to do is traffic shape the information going out eth0 to the local users by the interface the traffic arrived

Hi! I have successfully set up traffic shaping at our site using your and others howtos. I have a linux firewall (gateway), two leased lines. I shape only the incoming traffix now. I use HTB+SFQ and sort the packets using iptables with the CLASSIFY patch. It works very well. eth1----ISP2-\ eth2----ISP1--LINUX--internal network eth0 My problem is, that i can not shape my VPN (PPTP)

Hello list, I discover strange behaviour of shaping traffic that i setup from Shorewall-4.0.2. I know that this is not Shorewall problem but may be somebody from list can help me or explain this situation. I have follow interfaces in 'tcdevices' files: #INTERFACE IN-BANDWITH OUT-BANDWIDTH # $EXT_IF 500kbit 248kbit $INT1_IF 500mbit

hi all: the following scipt is wokring perfectly with limiting ...on limimitng per ip basis.. ---- eth0=public static ip eth2= private ip ( 192.168.2.1) -- iptables -t mangle -A POSTROUTING -s ! 192.168.0.0/32 -d 192.168.2.101/32 -j MARK --set-mark 21012 tc class add dev eth2 parent 1:1 classid 1:2101 htb rate 32kbit ceil 64kbit tc filter add dev eth2 parent 1:0 protocol ip prio 2 handle

Ok, shaping on Linux is new to me.. so bear with me if i am just stupid. curtain:/etc/shorewall# grep TC shorewall.conf | grep -v ^# TCP_FLAGS_LOG_LEVEL=info TC_ENABLED=Yes CLEAR_TC=Yes TCP_FLAGS_DISPOSITION=DROP curtain:/etc/shorewall# So it should be enabled, right? ---- tcrules ---- 1 eth0 0.0.0.0/0 all 2 eth1 0.0.0.0/0 all 2 eth2 0.0.0.0/0

Hi! I read http://mailman.ds9a.nl/pipermail/lartc/2002q4/006244.html and I did that. Can anyone tell me if there is something else to do for shapeing over tunnels to work? I noticed that gre interfaces don''t have a queue attached. I''m running linux-2.6.15 and iptables-1.3.4 with no patches. Thank you in advance, Sorin.

Hi! I want to add to my previous post that: my setup looks like this internet --> linux router with NAT and tc ==> gre tunnel ==> forwarding router --> LAN At my NATting router I can "see" the forwarded LAN (192.168.2.0/24). Now let''s say that there is a LAN workstation with the IP 192.168.2.18 and I filter the traffic with tc for it. If the fowarding router has

Hi all, i have a problem: i have an adsl modem that is connected to internet. I can''t manage this modem. Between my PC and the modem i have a linux firewall that make the NAT and the traffic shapping. I have create a script that limit the bandwidth of the "external" interface of the firewall so i can manage my bandwidth for my internet application. The problem is that i need to

Hello Lartc Mailing List: Been working on something the last week and a half and ALMOST have it working.., just need a few pointers from the wizards on this mailing list to nail it. Ok, my setup is a hub and spoke arrangement, hub is Cisco 2821 with IOS 12.4. Spokes are ruggencom RX1000 routers, Debian based with the following versions installed: rx1000test:~# uname -a Linux rx1000test

Hi List, FYI. We have been using CentOS 6.4 and have 2 vpn/gre tunnels to separate cisco rtrs using ospf. with kernel 2.6.32-358.23.2 We have upgraded to 6.5 bit using kernel 2.6.32-431.5.1 and the exact same configuration scripts for our vpn/gre tunnels. What I see is the first gre tunnel works great and I get an ospf neighbor. The second tunnel comes up and I can ping across it and I see

I''m trying to shape traffic on a Devil-Linux box. This note was originally sent to their maillist, because the LARTC list appears to have been down for the past few days. My mailbox was just flooded with a half dozen or so confirmation requests in response to my repeated attempts to subscribe to this list. ---------- Forwarded message ---------- From: drew einhorn

Dear List, I am wanting to perform some traffic shaping as the subject of this email suggests. What I am wanting to do is this; I would like to have traffic shaping performed on the following protocols: HTTP, RDP, GRE, PPTP, SIP and IAX. Obviously I would like to have highest priority set for voice packets so much so that the general http traffic does not impede on the voice packets. I

Hello all, I am providing broadband service through DVB circuit. I have 4KB uplink and 32KB downlink. I want to share 32KB downlink bandwidth among 192.168.0.0/24 (20 users in this subnet i.e 192.168.0.2-192.168.0.22)subnet where each user will get 2KB to 6KB bandwidth. And from 4KB uplink bandwidth each users will get only 1KB to 2KB bandwidth.

Hi, I have a Linux server and provide Internet access in the neighborhood and I also run a web server on the same machine. Although our external connection is not bad, the access to the web server from outside is awful - the web pages always require "Try again" when accessed. Do you think I can prioritize the traffic to the web server? How? I have a traffic shaper of the internal and

Hello all, this is my first post here. Sorry for my english. Gentoo LAN router, 2.4.26-hardened-r2 There are 2 WAN links, one LAN link. I am doing some iptables/routing/tc magic in my scripts. What''s interesting is marking packets traveling from all IP''s in LAN. Interesting commands are: ------------- for ip in `seq 50`; do $IPTABLES -t mangle -A FORWARD -o eth2 -d

I''ve set up Traffic Shaping on a Linux Router. Using HTB with SFQ, i''m trying to slow down heavy downloading for 20 subscribers over a 2048 kbit downlink. I''m classifying internet related traffic using iptables marking. bri0 is my local lan bridge, receiving egress traffic destined for subscribers. tc qdisc add dev bri0 root handle 1: htb default 2 tc class add dev

I am trying to mark outbound passive ftp traffic with iptables and shape it to 35KBytes. I am using the following script on the computer that runs the ftp server. It is not working correctly, it seems to limit ALL traffic. Cant file share or anything. Anyone might know what is wrong? It seems that I might need to add a ''lan limit'' so all traffic that is not marked still

I am looking for a good htb traffic shaping script to prioritize incoming traffic over outgoing traffic for my machine. I have a 100mbit line, ftp up, backup data comming in, but whenever mirrors starts grabbing it they use all the traffic and the backup data comming in (the important data) drops to like 300kb/sec. I was thinking some script doing sleep 60 [if downstream > 1mb/sec, limit

i got this problem, i want to shape my clients internet bw, but i don''t want to shape my local network traffic. For information, my clients using wireless to connect to my router[192.168.1.254]. when the clients request data from internet, example download from www.download.com, i want to shape his bandwidth, but when the clients [192.168.1.1] want to download from my file server example