similar to: Ingress question with sub classes

Hi, We are using kernel 2.4.24, tcng version 10b. I''m trying to do some policing in the ingress queue of the internet device. Until now we had configured some filters dividing traffic into queues, and on these queues the Double Leaky bucket meter was applied. The idea is to have a minimum of bandwidth assigned per class (the cir values) and a maximum (pir values), just as with the

Hello Mailing list, I have a problem with the prio qdisc and I don´t know what is wrong in my configuration This ist a sample configuration and looks like this: #include "fields.tc" #include "ports.tc" #define X16(i) i i i i i i i i i i i i i i i i dev ppp0 { dsmark { prio(bands 6, priomap X16($be)) { class if ip_proto == IPPROTO_UDP;

Hi all, Can someone please help with a tcng setup? I have played with tc and tcng in the past, and now would like to get some serious rules in place. However, I have a difficulty in setting them up. My setup is as follows: One machine working as a firewall: eth0 is the interface connected to a 512K DSL line eth1 is connected to a LAN eth2 is connected to another LAN, a bit like a DMZ eth1 and

Hello mailing list, i stand bevor a mystery and cannot explain it J. I want to do shaping and prioritization and I have done these following configurations and simulations. I can´t explain, that the combination of PRIO and TBF is much better than the HTB (with the prio parameter) alone or in combination with the SFQ. Here are my example configurations: 2 Traffic Classes http (80 = 0x50) and

I''ve been having a bit of difficulty with a hierarchy of HTBs that I''m wanting to create. Essentially, I''ve got one interface that goes to both the DMZ and the internet. When going to the internet, some of the traffic will be going through a VPN and therefore I want to prioritize it differently, however I want to give the DMZ traffic full speed as long as it

I can''t seem to match packets less than 512 bytes: class( <$bulk> ) if tcp_dport == 81 && !( ip_len & 0xfe00 ) ; or if tcp_dport == 81 && ip_len < 512 Both rules match any packet I send to port 81, even when the total IP length is much greater than 512 bytes: class htb 2:4 parent 2:1 leaf 5: prio 1 rate 8000bps ceil 24000bps burst 6Kb cburst 1839b Sent

Thank you for your help. It generates this script : tc qdisc add dev eth0 handle 1:0 root htb default 2 tc class add dev eth0 parent 1:0 classid 1:1 htb rate 75000bps ceil \ 75000bps tc class add dev eth0 parent 1:0 classid 1:2 htb rate 125000bps tc filter add dev eth0 parent 1:0 protocol all prio 1 u32 match u32 \ 0xa000001 0xffffffff at 12 classid 1:1 But I thought it was necessary to

Hey, I currently have a box serving as a firewall (running iptables) and packet shaper (using tc / tcng''s tcc compiler) to shape a large amount of inbound and outbound traffic to my data center. Whilst I can perform shaping functions using HTB, I need to also provide an absolute (to the nearest few 100kb/s) bandwidth usage maximum. As an example I might have 200MBit/sec

Newbie here... tcng version 10b I''m just learning about htb and using tcng. I am trying to make the example in Martin A. Brown''s Traffic Control with tcng and HTB HOWTO v0.5 example 2 /* * Simply commented example of a tcng traffic control file. * * Martin A. Brown <mabrown@securepipe.com> * * Example: Using class selection path. * * (If you are reading the

Hey people, I have the following tcng configuration: #include "fields.tc" #include "ports.tc" dev "eth0" { egress { // Voice traffic class (<$voice>) if udp_dport >= 20000 && udp_dport <= 23000; // SSH connections class (<$interactive>) if tcp_dport == PORT_SSH; //

Hi I''m completely stuck with the tcng language - I assume there must be some way to arrange queues hierachically like eth1 | TBF | PRIO / \ class class but my attempt (below) produces a "inferno.tc:8: qdisc "tbf" has no classes near "prio"" when run through tcc. dev eth1 { egress { tbf (rate 128kbps, burst 64kb,

Hi all, I have read the larc howto and I need to apply a traffic shaper with this configuration: router / two interface etho and eth1 lan lan is on eth1 and on eth0 I''ve the dsl connection (1.2 Mbit / 256 kbit) I need to limit the bandwith towards lan and I''ve thought at HTB and tcng. I write the script belove. I want limit the p2p and ftp (ssh and irc) connection at 15

Hey all, i have a class. class ( <$call1> ) if ip_dst == 10.100.1.6 && tcp_dport == 22 if ip_src == 10.100.1.4 && tcp_sport == 22 ; Now when i apply this traffic TO 6 on port 22 is indeed limited to the speed i specify BUT it doesn''t seem to take the src into account at all. If i change the src to anything, even an address that

Ok, earlier I post a message explaining my problem with HTB and layer7 (or ipp2p), about not being able to shape the traffic. Well, actually this is what''s happening, I''m marking the packets (right now, I''m using ipp2p as Klaus adviced me to) with iptables, and my queue rules are made using tcng, I''m using the HTB qdisc, and traffic is going to the HTB class

From: Willem de Bruijn <willemb at google.com> [ Upstream commit 6dd912f82680761d8fb6b1bb274a69d4c7010988 ] Syzkaller again found a path to a kernel crash through bad gso input: a packet with gso size exceeding len. These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment. But they may affect gso size calculations earlier in the path. Now that we have thlen as of commit

From: Willem de Bruijn <willemb at google.com> [ Upstream commit 6dd912f82680761d8fb6b1bb274a69d4c7010988 ] Syzkaller again found a path to a kernel crash through bad gso input: a packet with gso size exceeding len. These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment. But they may affect gso size calculations earlier in the path. Now that we have thlen as of commit

From: Willem de Bruijn <willemb at google.com> [ Upstream commit 6dd912f82680761d8fb6b1bb274a69d4c7010988 ] Syzkaller again found a path to a kernel crash through bad gso input: a packet with gso size exceeding len. These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment. But they may affect gso size calculations earlier in the path. Now that we have thlen as of commit

From: Willem de Bruijn <willemb at google.com> [ Upstream commit 6dd912f82680761d8fb6b1bb274a69d4c7010988 ] Syzkaller again found a path to a kernel crash through bad gso input: a packet with gso size exceeding len. These packets are dropped in tcp_gso_segment and udp[46]_ufo_fragment. But they may affect gso size calculations earlier in the path. Now that we have thlen as of commit

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Hello all, I am trying to set up a simple htb based system, where packets with source ip 10.0.0.1 should have their own class. I plan to use tcng to set it up easier. Is there something wrong in my tcng file ? ~/tcng$ cat htb /* */ #include "fields.tc" #include "ports.tc" dev eth0 { htb ( ) { class ( rate 600kbps, ceil 600kbps ) {