similar to: Borrowing between HTB classes not working as expectd.

hello, I try to use layer7 filter to classify packets. I have a proble with http match. This protocol seems to work well with l7-filter (http://l7-filter.sourceforge.net/protocols) but for me nothing is filtering in http class. Someone can help me ? Here is my script : #!/bin/bash IPT_BIN=/sbin/iptables TC_BIN=/sbin/tc INTER_OUT=ppp0 LINK_RATE_UP=1000Kbit RATE_ACK=200Kbit RATE_DEFAULT=100Kbit

What''s going on here? I''m spewing UDP traffic at this thing, and it is exceeding the ceil. Anyone know how to fix this? class htb 1:613 parent 1:5 leaf 613: prio 6 quantum 2560 rate 20480bit ceil 103360bit burst 15Kb/8 mpu 0b overhead 0b cburst 1728b/8 mpu 0b overhead 0b level 0 Sent 16591370 bytes 4159 pkt (dropped 39449, overlimits 0 requeues 0) rate 412384bit 6pps backlog 0b

A bit more detail. I have the following htb classes set up... class htb 1:356 parent 1:4 leaf 356: prio 4 quantum 1600 rate 12800bit ceil 51680bit burst 15Kb/8 mpu 0b overhead 0b cburst 1663b/8 mpu 0b overhead 0b level 0 class htb 1:357 parent 1:4 leaf 357: prio 4 quantum 1600 rate 12800bit ceil 51680bit burst 15Kb/8 mpu 0b overhead 0b cburst 1663b/8 mpu 0b overhead 0b level 0 class htb 1:2 root

Hi Guys, I want to create multiple virtual interfaces on a system running linux 2.6. The main requirment being, to assign unique MAC address fo each of the virtual interfaces. I need to know, if this is possible and will really appriciate if someone can provide me pointer in this direction. Thanks a lot. R. Singh _______________________________________________ LARTC mailing list

Hi, Does anyone tried to get ipip or gre tunnel behind NAT environments. ? i''m trying to make both side tunneling with ipip or gre with private address just like belows.. A -------------------FIRWWAL -------------------INET ------------------- B PRIVATE PUBLIC PUBLIC (10.100.0.1) (211.xxx.xxx.xxx) (

Script started on Tue Mar 3 07:35:34 2015 doctor.nl2k.ab.ca//usr/source/openssh-SNAP-20150304$ make tests [ -d `pwd`/regress ] || mkdir -p `pwd`/regress [ -d `pwd`/regress/unittests ] || mkdir -p `pwd`/regress/unittests [ -d `pwd`/regress/unittests/test_helper ] || mkdir -p `pwd`/regress/unittests/test_helper [ -d `pwd`/regress/unittests/sshbuf ] || mkdir -p `pwd`/regress/unittests/sshbuf [ -d

helo again. I think this question i am asking is worth: we know that pppoe-server creates a pppX device on each connection done to it. So, when i have to shape, i have to shape each pppX connection device on itself alone. What i know is that the borrowing method on one device by itself, e.g. ppp0, alone using HTB or the like. this means that i have to create for another device, e.g. ppp1,

I have - HZ - recompiled to 1000 - class nr 1 - 2kbit ceil 1024kbit - class nr 2 - 16kbit ceil1024kbit But class 1 works with 20kbit/sec and class 2 with 60kbit/sec. The proportion does not seems right. Thank you. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hello... I have one 2Mbit WAN interfaces and two vlan LAN interfaces - vlan2 and vlan3. I''d like to limit bandwidth something like this: rate 1Mbit ceil 2Mbit for vlan2 and rate 1Mbit ceil 2Mbit for vlan3 with possibility to borrow bandwidth between vlan2 and vlan3. ^^^^^^^^^^^^^^^^^^^ Is it possible to do in any way? regards, -- Michal

I have an PNY NVIDIA Quadro NVS 440 PCI Express x1. It's main feature is it's 4 monitor support. The PCIe x1 port was needed since my workstation is actually an beefy server w/ no x16 slots. Linux support, even when using the binary drivers has deteriorated over the years, especially once the desktops started going '3D'. I went from running on a 4 monitor, single desktop, back

Hi, I have a box set up to distribute load over 4 satellite connections. I cannot use Instant Messenger programs with it as it stands, I believe that using iproute2, the path to the server is not being locked to one interface, so the IM servers are getting user traffic from multiple IPs. When I set just one default gateway, IMs work great. When I use the scope global/nexthop method of load

Hi, I have the my gateway with load balancing traffic going out over two providers. Web browsing is fine...working great. But, my clients (office staff) complains that MSN keeps disconnecting (in 5 mins). Why? Please help me... Regards, ro0ot

Hello! I have a quite complicated setup. In my network on each interface there is bandwidth limitation for each user. Booth outgoing (on interface itself) and incoming (attached IMQ) traffic. There is main HTB class which limits bandwidth for whole interface and HTB subclasses for each user. Filtering is done with hashing filters. This setup was working correctly. But now in the network I

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a linux system with 4 ethernet interfaces, eth0 goes to the internet, eth1, eth2, and eth3 are NAT''d LANs. I want to use an ingress filter to prioritize bandwidth (downstream from internet) to various IPs. I want to sett it up something like this.... eth0 <--[NAT]--> dummy0 <---> dummy1 <---> eth1,eth2,eth3 dummy1

Martin Devera wrote: > If you read the manual, the algorithm will not work correctly > with {,c}burst < MTU ... > devik > I just tried to change {,c}burst to 1600, or leaving them by default but no visible result. here is the latest tc -s -d class show dev eth0 class htb 1:101 parent 1:1 prio 0 rate 40Kbit ceil 40Kbit burst 1599b/8 mpu 0b cburst 1599b/8 mpu 0b quantum 512 level

Hi, I''m fighting seriously with a most simple HTB setup. I''d like to share the incoming 64kbps into 5 and 59 for two different machines under NAT. HTB seems to hold the required limits when ceil is not set (no borrowing), but when borrowing enabled it seems to share equally rather then keeping the specified ratio. My setup is below. A typical output of "tc -s -d qdisc

Hello to everybody, We want integrate in a router/firewall (Debian Based, 2.6 Kernel), an HTB shaper. The goal is to divide the traffic for classes of workstations, at example in three classes, let say A, B and C. Example: A 70 Mb/s B 20 Mb/s C 10 Mb/s If B don''t make traffic, 7/8 of 20Mb/s must be assigned to A and all the rest at B We have used CBQ and HTB, with poor succes. Anybody

Hello there! Yesterday I started my experiments with HTB. I configured it this way: 1: root HTB qdisc | 1:1 HTB class rate 1000kbit | /-------+------\ 1:40 1:50 1:60 user1 user2 user3 rate 333 & ceil 1000 for everyone. User2 is disconnected and user1 and user3 are downloading. For all the time (t1-t5) there are ONLY these two users downloading! HTB should give

Greetings, My question deals with the htb version of wonder shaper. I used it for some time without much alteration except I noticed something odd in the way the rates are set up for the 3 htb classes. The way I understand it, there are 3 classes: 1:10 - high prio class with rate ${UPLINK}kbit 1:20 - bulk/default class with rate $[9*$UPLINK/10]kbit 1:30 - bulk/default low priority

After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: 1. If a host on the network has 5 or more simutaneous tcp connections to ports above 1024, mark all connections to ports 1024 and above as 60. 2. If a host has received (or sent) UDP packets from 5 different hosts'' ports above 1024 in a