similar to: tc filter and ip match

hi all friends has tc filter an priority of rules , like iptables, let me explain it : with iptables, when the packet find a rule to go, it doesnt see the rest of rules, and how is the behavior of tc filter ?? see it : one packet from 10.10.10.1:2421 going to 11.11.11.1:110 what rule above it will be shaped ?? 1 ) tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32 match ip src

Hi everybody, i am new to this list so dont blame me if i will talk about nothing.. At this moment i am experimenting with htb + tc u32 filters , the problem is that i want some traffic to be unshaped so i did this.. tc qdisc add dev eth0 root handle 10: htb default 20 tc class add dev eth0 parent 10: classid 10:2 htb rate 256Kbit THIS IS TRAFFIC I WANT NOT TO BE SHAPED tc filter add dev eth0

Hi I''m doing traffic shaping with tc on ''10.0.0.0/30'' and ''10.0.0.28/30''. I want to delete part of shaping rules on the fly. (see my configuration at the end of this mail) I wan''t to delete the shaping for ''10.0.0.0/30'' on the fly while still keeping the shaping for part ''10.0.0.28/30'' running. When I for

Hi, I am new to tc and have been reading quite a bit on how to set it up etc. Everything seems to be working fine, until I started scp-ing a large file over a low bandwidth connection as part of my testing process. Here is the setup: my pc --- bridge running tc/htb --- rest of network TC is filtering traffic from "my pc" and classifies it as 120kbit (see my script below). I then scp a

I´d like to limit input traffic from 2 subnets. Ex. 128Kbps for the two subnets: 10.0.0.0/24 10.0.1.0/24 Like: tc filter add dev eth3 parent ffff: protocol ip prio 5 u32 match ip src 10.0.0.0/24 ; 10.0.1.0/24 police rate 128kbit burst 10k drop flowid :1 Obviously this command did not work because tc does not accept two subnets as src separeted by ";". Is there a way of doing this ?

Hi All, I''m configuring my natting-firewall to do some tc shaping. Some traffic has to be shaped on 30mbit, some on 10mbit all the others are unlimited. The configuring and filtering works correctly. The traffic that is shaped at 30mbit is correct, but the traffic that is shapped at 10mbit only gets to 100KB/sec. It is on a device configured with bonding (both in and out interface).

Hi Here is something that worked with with 2.6.10-1.771_FC2smp and stopped working when I upgraded to 2.6.16-1.2069_FC4smp. These are fedora kernels and the network controller is an Intel Gbit (e1000) running a 100 Mbps Full Duplex. Don''t know how or if this matters but the 2.6.10 kernel has CONFIG_X86_HZ=1000 and the 2.6.16 has CONFIG_HZ=250 The idea is to just shape to , say 2Mbit, a

Hi I have been playing with tc. I''m using htb and sfq. I tried to setup shaping of every ip address within a /20. I found that there must be an upper limit of about 2096 on the number of rules (classes, qdiscs or filters). I was testing a /20 which gives 4096 classes, qdiscs and filters. I''m using hashkey to optimize processing of frames. When executing the script below - it

Hi All Can someone tell me what am I doing wrong? These was suposed to catch icmp type 8. Why ''match u8'' does not work? # tc filter add dev eth0 protocol ip parent 1: prio 2 \ u32 \ match u16 0x0800 0xffff at -2 \ match u8 8 0xff at 20 \ flowid 1:5 Illegal "match" # # tc filter add dev eth0 protocol ip parent 1: prio 2 \ u32 \ match

I''m just-so-fresh to the list, so hello everyone. I''m having a realy hard time with setting up very simple bandwidth management. What I am trying to do is setup a 10Mbit interface to send at only 1920kbit to most of the network (to make sure it hardly ever tops 2mbit). I did succeed with the ingress traffic... With egress however, I get very odd results at different speeds. With

Hi all, I''m new to using iproute2 for traffic shaping but not new to Linux. Essentially I have a WAN between two cities that I stream audio over for rebroadcast. Since it''s all done live stability and prioritization is critical in staying on air for our radio broadcasts. My WAN is 1.5Mbit PVC within my provider''s infrastructure so I have an unencrypted direct

Hi folks. Let''s say I would like to make some bandwidth control on my network using HTB. I have 2 clients: PC1: 192.168.100.2 PC2: 192.168.100.3 Server: 192.168.100.1 This has 2 NIC''s eth1 is local and eth2 is connected to the internet. It could be nice to have a script, where you could specify, how much bandwidth you want for a specific host on a network, like, PC1 has

Hi, I have problem with this simple script: #!/bin/bash if [ "$1" == "del" ]; then tc qdisc del dev eth0 root handle 1: htb default 10 exit fi tc qdisc add dev eth0 root handle 1: htb default 10 tc class add dev eth0 parent 1: classid 1:1 htb rate 800kbit ceil 900kbit tc class add dev eth0 parent 1:1 classid 1:10 htb rate 300kbit ceil 600kbit tc class add dev eth0 parent 1:1

Hey, I have a problem adding a filter matching anything, here is my setup: ############### tc qdisc add dev eth0 handle 1: root prio tc qdisc add dev eth0 parent 1:1 handle 10: pfifo tc qdisc add dev eth0 parent 1:2 handle 20: tbf latency 50ms rate \ 128kbit burst 256kbit tc filter add dev eth0 protocol ip parent 1:0 prio 1 handle 666 fw \ flowid 1:2 tc filter add dev eth0 protocol ip parent

I have a pretty simple setup. I''ve got a linux nat box, with some internal hosts. I''ve also got some servers in a dmz. It looks something like this: Internet | (external network) | | | | linux dmz nat hosts |

Hi, How can I delete an existing filter? Is it possible? I tried different combinations of tc commands but, while manage to delete an existing qdisc or class, I wasn''t able to find a way to delete an existing filter. The tc man page doesn''t even list the del command in the synopsis. tc filter [ add | change | replace ] \ dev DEV [ parent qdisc-id | root ] \

The interface is setup like this: # tc qdisc del dev eth0 root # tc qdisc add dev eth0 root handle 1: htb default 2 # tc class add dev eth0 parent 1: classid 1:2 htb rate 20mbit ceil 20mbit If I add a second class and a filter to send traffic to it like this: # tc class add dev eth0 parent 1: classid 1:130 htb rate 1Mbit ceil 1Mbit # tc filter add dev eth0 protocol ip parent 1:0 prio 130 u32

Hi, Is it possible to make a filter with tc which exclude an IP like iptables ?? ex: iptable -t mangle -A PREROUTING -i eth0 -d ! 192.168.1.222 -j MARK ... I try the ! with tc but it doesn''t work. Thanks, doude. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

I''m using HFSC to limit bandwidth for our wireless customers. However, I''d also like the bandwidth prioritized based on packet type. This is what I''m trying right now, and I''d just like some input from anyone out there knowledgeable in this on whether it does what I want it to do: Eth1 -> HFSC ........|-> HFSC (User1) (Min 512 Kb, Max 1024 Kb, Burst 1536

Hi Is there a way of marking packets by mac address instead of ip or ports using a "tc filter u32 match"? I read somewhere that I could use the offset -8 and -14 to grab the mac addresses but if I use anything lower than -8, for example -9, I get an error. I''m modifying the wondershaper script to cap the download speed by mac address. Any sugestions?