similar to: classid, prio and position

Happy New Year. Finally got my fw and tc rules down pat for the bridge, now interested in introducing a third nic to have nat on the box as well. Does anyone have a idea of a good place to start reading up on the subject, mainly interested in how to setup the flow direction to start with as to get a overall understanding of the flow, found that help best. Internet --- eth0 --- eth1 ---

Hi Having a problem trying to figure out how to shape local services running on the debian box (asterisk, squid etc) as currently the voice only seems to be getting shaped one way when making external calls. For example I have the rules below (these are the matching rules only not the actual policy rules): #Create Chain for local traffic (outbound) /sbin/iptables -t mangle -A match-all -m

Currently using physdev on a bridge to try and isolate certain paths across and to the bridge. It all works except when trying to stop the flow in one direction on the FORWARD chain?? Can someone please help?? Below is the testing done so far. eth1 <---> BRIDGE <---> eth0 # Block (eth0 ---> eth1) - blocks both directions and not just one?? iptables -A FORWARD -m physdev

Trying to use the policy drop rule with the bridged firewall, when I removed the first line the transparent proxy works great? It seems a bit strange as from reading several articles on it I thought the following occurs. 1st line - if it doest match it gets dropped on the local filter input. 2nd line - redirects the traffic off the link layer into the network layer ready for line 3. 3rd line -

Hi, I wanted to implement some QOS on my Linux Box with HTB, but after some time spend on the configuration and tests, I still don''t manage to have some correct results. Here are the details : -ROOT 2000 kbits -HIGHPRIO SUBCLASS 50 kbits prio 0 -SUBCLASS1 750 kbits prio 1 -SERVICE1 250 kbits prio 1

Hello, I wrote a simple traffic shaping script (below) that should have allowed me to shape my internet traffic a bit (ppp0 - adsl 128kbit/64kbit; local interface eth0). The script works only partially - the speed is being limited but too much. Without running this script my download rate is about 10kBytes (with second computer also downloading at about 6kBytes). After running it my download speed

> Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > or, via email, send a message with subject or body ''help'' to > lartc-request@mailman.ds9a.nl > > You can reach the person managing the list at >

Hi I am currently learning iptables and would like to see the output of shorewall rules in iptables format, as I would like to make a script for the rules instead of using shorewall. Kind Regards William _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Thanks for quick reply Andreas! > Every class is allowed to use bandwidth as long as it does not have to > borrow (the specified rate is guaranteed). Prio in HTB only affects > borrowing bandwidth from other classes... In the example below, the class > 1:5 should be allowed to borrow bandwidth before 1:14 does. Thats exactly what I want from HTB to do..to prio the borrowed bandwidth.

Hi I am current trying to set up a guaranteed minimum rate for the leaf (1:1x). Also would I be correct in saying that the quantum is the dividing rule (so if I keep it the same "1532" and keep all the leafs in "1:1x" prio 3 they should all get the same amount of bandwidth shared across them equally?). For example below would the "rate" in the "1:1x" leaf

Hi again, I keep posting about my problem with HTB -> http://mailman.ds9a.nl/pipermail/lartc/2005q3/016611.html With a bit of search I recently found the exact same problem I have in the 2004 archives with some graphs that explain it far better than I did -> http://mailman.ds9a.nl/pipermail/lartc/2004q4/014519.html and http://mailman.ds9a.nl/pipermail/lartc/2004q4/014568.html

Hi I''m setting up shaping using HTB and hashkey. It seems like there is a limit on the number of classid''s at 10000? How can I go higher than 10000? This is what my output say when I reach classid number 10000: ... ... /sbin/tc class add dev eth0 parent 2:6 classid 2:9998 htb prio 5 rate 768kbit ceil 768kbit burst 0 cburst 0 /sbin/tc qdisc add dev eth0 parent 2:9998 handle

Hi all Can anybody pls explain me the difference between classid and flowid. In which scenario we may need to use either of one. Any help will be greatly appreciated. regards Vinoos. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hi, All, I have a class 1:10, it seems if I use netfilter mark as classifier, then the class will be refered as classid 1:10, however, if I use u32 as classifer, then the class should be refered as flowid 1:10, is it right? Thanks in advance, James

root@Delta:~# tc filter add dev ppp0 parent 1:1 flowid 1:5 protocol ip Unknown filter "flowid", hence option "1:5" is unparsable root@Delta:~# tc filter add dev ppp0 parent 1:1 classid 1:5 protocol ip Unknown filter "classid", hence option "1:5" is unparsable I don''t understand why it does not work. Can anybody explain me this problem? --

Hey, everyone, I am kindda newbie to this subject, so I just post my problem directly, please let me know if anything is wrong. in my config file when I use tc class add dev eth1 parent 1:11 classid 1:11016 htb rate 512kbit burst 10k everything works correctly but...when classid goes larger than 1:19999, eg: tc class add dev eth1 parent 1:21 classid 1:21006 htb rate

Hi, tc qdisc add dev eth0 root handle 1: htb tc class add dev eth0 parent 1:0 classid 1:1 htb rate 2000Kbit ceil 2000kbit tc class add dev eth0 parent 1:1 classid 1:2 htb rate 1200Kbit ceil 2000kbit tc class add dev eth0parent 1:1 classid 1:3 htb rate 800Kbit ceil 2000kbit tc class add dev eth0 parent 1:2 classid 1:21 htb rate 600Kbit ceil 2000kbit tc class add dev eth0 parent 1:2

Hi, I am getting the errors given below, when I am trying to add the prio to any table. What can be the problem and how can i resolve it.... Kindly help [root /root]# ip rule RTNETLINK answers: Invalid argument Dump terminated [root /root]# ip rule list RTNETLINK answers: Invalid argument Dump terminated [root /root]# ip rule list table main "ip rule show" need not eny arguments.

Hello Everybody, I am successful in throttling down the Bandwidth to 8kbit using HTB. Below that I get report to change r2q. I want to bring down the Leaf class Bandwidth to 3kbit. My script is as below: Tc Script to throttle down the Bandwidth to 8kbit based on MAC address and IP address tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1:0 htb default 30 r2q 1 tc class add

Hi All, I''m using HTB to shape traffic, a little like this: tc qdisc add dev eth2 root handle 1:0 htb tc qdisc add dev eth3 root handle 1:0 htb tc filter add dev eth2 parent 1: protocol 0x8100 prio 5 u32 match u16 3000 0x0fff at 0 flowid 1:1 action ipt -j MARK --or-mark 0x01000000 tc filter add dev eth3 parent 1: protocol 0x8100 prio 5 u32 match u16 3000 0x0fff at 0 flowid 1:1 action