similar to: bridge + extra nic traffic shaping

Hi All, I''m using Shorewall 3.0.4 and I''m wondering if it is possible to do traffic shapping on only one interface from a bridge. The firewall has got 3 NIC, eth0, eth1, eth2. eth0 and eth2 are bridged, but if I''m right, when you specify a traffic rate for a link, you do it for the interface. In my case, eth0 and eth2 do not appear in the interface file, but it is

Hi all, I previously mailed this list explaining that I been given the task of implementing a dynamic traffic shaping scheme on an existing network. I was looking for guidance on how I should approach this but unfortunately I was unable to provide much information about the existing traffic shaping system. I have recently obtained the existing tc scripts though and was hoping someone could help

Looking for some advise from the experts out there. We do simple traffice shaping and I''m having trouble figuring out how to shape vpn traffic using a tc filter. The following filter works fine for SSH tc filter add dev eth2 parent 1:0 protocol ip u32 match ip sport 22 0xffff classid 1:10 The following throws and "Illegal match" error when trying to filter GRE traffic. tc

Hi! I have successfully set up traffic shaping at our site using your and others howtos. I have a linux firewall (gateway), two leased lines. I shape only the incoming traffix now. I use HTB+SFQ and sort the packets using iptables with the CLASSIFY patch. It works very well. eth1----ISP2-\ eth2----ISP1--LINUX--internal network eth0 My problem is, that i can not shape my VPN (PPTP)

> Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > or, via email, send a message with subject or body ''help'' to > lartc-request@mailman.ds9a.nl > > You can reach the person managing the list at >

I want to configure a device with three network interfaces where two of them would bridge two segments of the LAN subnet and the third one would be connected to the WAN link. eth0 - 10.10.10.2/24 to be connected to the internet gateway having IP 10.10.10.1/24 (also the default gateway for the device) eth1 and eth2 bridged as br0 with IP address 172.16.100.1 connected to different segments of the

I have a setup where I have three NIC in a Debian box. I have eth1 conected to internet and eth0 NAT''ed to 192.168.1.1. eth1 and eth2 are bridged together, given ip 192.168.122.2. What I want to achieve is to perform traffic shaping on the bridge as well as prioritizing the traffic from eth0 very low. (This is from trental flat ...) However it seems that I am unable to perform thhe

I have posted this question to the netfilter mailing list along with #ebtables, #iptables, and #netfilter. Nobody has really responded, so I''m led to believe that it is either incredibly complicated or *really* simple. Please, somebody throw me a bone here! Ok, on with the show... I have a bridge (br0) with two interfaces (eth1 and eth2). Neither br0, eth1, or eth2 have an

Hi, complete newb and I apologise for it. I have a setup where my linux box has multiple broadband connection where I am routing certain things over certain interfaces, currently 2 links eth2 is a 1500/256 and eth3 is a 512/512, eth0 is the link to the LAN for users. What I am trying to do is traffic shape the information going out eth0 to the local users by the interface the traffic arrived

I''m trying to shape traffic on a Devil-Linux box. This note was originally sent to their maillist, because the LARTC list appears to have been down for the past few days. My mailbox was just flooded with a half dozen or so confirmation requests in response to my repeated attempts to subscribe to this list. ---------- Forwarded message ---------- From: drew einhorn

https://bugzilla.netfilter.org/show_bug.cgi?id=779 --- Comment #3 from calebc2099 at yahoo.com 2013-07-11 23:25:20 CEST --- (In reply to comment #1) > I am unable to replicate this issue on a 3.10 kernel. Perhaps the "defect in > the NIC" you describe is actually responsible for the corrupt packets you are > seeing? > > Have you tested this on a recent kernel? Have

Hi, I've set up a bridge using the 2.6.11.6 kernel. The machine is running Debian testing with three NICs in it. eth0 is a standard 100Mb Intel NIC, eth1 and eth2 are both Intel gigabit cards using the e1000 driver. I tested everything at 100Mb and it worked fine. I moved the machine into production, eth1 plugging into a dumb 100Mb D-link switch, eth2 plugging into a shiney new Cisco

During my tests I''m starting to feel stupid :). Traffic shaping works quite on its own. System: RedHat 7.3, RedHat kernel 2.4.18-18.7.xsmp, HTB version 3.6, interfaces eth0 and eth1 are acting as bridge br0. If TCP shaping almost works, it just exceeds limits UDP is not shaped. Traffic flows PC=>eth0=>eth1=>PC. Statistics shown is for just UDP traffic (1mbit of small udp

I am using the madwifi driver with the patch to allow changing of the MAC address and I have two other ethernet interfaces plus a pppoe interface. My outbound connection is ppp0. I have ath0, eth1, eth2 for internal interfaces. I have added these three interfaces to br0. Once the traffic leaves the linux router, it gets NAT'd and goes out through ppp0. All traffic on all segments works

Hi, I recently upgraded the kernel in my Debian server from 2.4.22 to 2.6.9. This server acts as router and has an ethernet bridge (br0) that combines eth1 and eth2. Each of these two network cards is connected to one Windows PC. Since I booted kernel 2.6.9 it takes more than one minute for a client pc to receive its IP address when that one starts up. I noticed that the kernel messages (shown

On Wed, 16 Jun 2004 17:53:08 +0800 (CST) "vanyew" <vanyew@mail2000.com.tw> wrote: > Dear Stephen, > > I'm a Linux embedded developer. > We want to build the bridge function on our product. > > We use brctl to build the bridge device. > > [root@localhost /]# brctl show > bridge name bridge id STP enabled interfaces >

Hi Marcin, There is no problem to make limitation on a linux bridge. The rule must be the same as for a router: there must be applied on eth0 and eth1. All my best, Liviu On Wed, 2005-04-13 at 10:48 +0200, lartc-request@mailman.ds9a.nl wrote: > Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World Wide Web, visit >

>Theory is.. You can only shape outbound traffic. Inbound is via tcp windowshaping etc.. In theory yes, but it is shaping inbound transfers to my server. >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 65437 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 50000:51000 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0

Hi all, I have one bridge system (used for controlling bandwidth) connected to three different DSL ISP provider. I have the following setup below: - +-------------+ | br0 | | -> eth1 | -> DSL_1 | -> eth2 | +-------------+ | br1 | | -> eth3 | -> DSL_2 | -> eth4 | +-------------+ | br2 | | -> eth5

Hi all, Perhaps I''ve miss something... I have read every FAQ and documentation from shorewall.net before asking question here, hope someone can help me ! Try many things DNAT, netmasq, proxy arp, it doesn''t work. LAN and PRIVATE network can''t see each other, i can''t ping PRIVATE LAN from LAN and vice-versa. I first think of routing error, but i can''t