similar to: tcng ingress policing question

Hi all, It is my understanding that with HTB, the rate and the ceiling are divided over the elements of the class. E.g. using a rate of 100 kb and a ceiling of 2000 kb for a class with 10 elements on a 100Mb NIC, the effect of the ceiling will be that if all elements are generating their maximimum possible trafic they will be effectively limited to ~ ceiling / number of elements, in this case

Hi I''m looking for a quick recipe for a newbie to control http traffic in my linux gw. My internet is overloaded already and vpn external clients are experiencing troubles (disconnecting in peak hours). Any suggestions ? Regards Guillermo Caracas/Venezuela On Thu, 2004-05-06 at 14:40, lartc-request@mailman.ds9a.nl wrote: > Send LARTC mailing list submissions to >

Hello all, I am trying to set up a simple htb based system, where packets with source ip 10.0.0.1 should have their own class. I plan to use tcng to set it up easier. Is there something wrong in my tcng file ? ~/tcng$ cat htb /* */ #include "fields.tc" #include "ports.tc" dev eth0 { htb ( ) { class ( rate 600kbps, ceil 600kbps ) {

Hi I''m completely stuck with the tcng language - I assume there must be some way to arrange queues hierachically like eth1 | TBF | PRIO / \ class class but my attempt (below) produces a "inferno.tc:8: qdisc "tbf" has no classes near "prio"" when run through tcc. dev eth1 { egress { tbf (rate 128kbps, burst 64kb,

Thank you for your help. It generates this script : tc qdisc add dev eth0 handle 1:0 root htb default 2 tc class add dev eth0 parent 1:0 classid 1:1 htb rate 75000bps ceil \ 75000bps tc class add dev eth0 parent 1:0 classid 1:2 htb rate 125000bps tc filter add dev eth0 parent 1:0 protocol all prio 1 u32 match u32 \ 0xa000001 0xffffffff at 12 classid 1:1 But I thought it was necessary to

Hey, I currently have a box serving as a firewall (running iptables) and packet shaper (using tc / tcng''s tcc compiler) to shape a large amount of inbound and outbound traffic to my data center. Whilst I can perform shaping functions using HTB, I need to also provide an absolute (to the nearest few 100kb/s) bandwidth usage maximum. As an example I might have 200MBit/sec

Martin, If I understand whay you are suggesting, there is a problem in your design: It will only work if you use Hide NAT. The problem is that the ip_src == IP0 rule is wrong: The ip_src is not changed by the router and it is not equal to the IP of any of the machine interfaces. Can you think of a solution that will work in the following reasonabl scenario: Lets say I have two T1 internet

Hi all. I''ve written a small htb script that uses U32 and FW (marked by IPTABLES) filters, but TC doesn''t seem to be using the "cls_fw.o" module !!! I''m using redhat v9.0, kernel 2.4.8-20, iproute 2.4.7-7. Here is my script: ========================================================== ##################### #Interface definition #####################

Greetings all, OK - just started playing around with traffic shaping - have imq and htb and (I think) everything else I need in the kernel and running well. My initial lab task was to protect a H.323 session over a simulated half T1 while adding bulk traffic - got that accomplished after slogging through learning tc and decided in short order that a more intuitive interface would be

Hi all, We have 2 class C networks that are connected by a Linux router with the internet. We want to apply traffic control (bandwidth control). For that we wrote the tcc script below. We have 2 problems: 1. To establish a 2 megagit download we must actually set the value to 2500kbps. Is there a possible reason for that? 2. If we enable the WAN device we get very hight ping times (they change

Hi all, The following ingress statement: .... $host2 = SLB(cbs 1024kb, cir 2048kbps); class(<>) if ip_dst == 81.175.84.2 && SLB_else_drop($host2); .... is compiled by TCNG into the folling tc command: ... tc filter add dev eth0 parent ffff:0 protocol all prio 1 u32 match u32 0x51af5402 0xffffffff at 16 classid ffff:0 police index 505 rate 256000bps burst 131072 mpu 0 action

Hi all, Can someone please help with a tcng setup? I have played with tc and tcng in the past, and now would like to get some serious rules in place. However, I have a difficulty in setting them up. My setup is as follows: One machine working as a firewall: eth0 is the interface connected to a 512K DSL line eth1 is connected to a LAN eth2 is connected to another LAN, a bit like a DMZ eth1 and

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible

Although RAW sockets can be used when specifying the source address of packets (defeating one of the aspects of the jail) some people may find it usefull to use utilities like ping(8) or traceroute(8) from inside jails. Enclosed is a patch I have written which gives you the option of allowing prison-root to create raw sockets inside the prison, so

Hey all, i have a class. class ( <$call1> ) if ip_dst == 10.100.1.6 && tcp_dport == 22 if ip_src == 10.100.1.4 && tcp_sport == 22 ; Now when i apply this traffic TO 6 on port 22 is indeed limited to the speed i specify BUT it doesn''t seem to take the src into account at all. If i change the src to anything, even an address that

I have a data frame that looks like this: > gctablechromonly[1:5,] refseq geometry gccontent X60_origin X60_terminus length kingdom 1 NC_009484 cir 0.6799 1790000 773000 3389227 Bacteria 2 NC_009484 cir 0.6799 1790000 773000 3389227 Bacteria 3 NC_009484 cir 0.6799 1790000 773000 3389227 Bacteria 4 NC_009484 cir 0.6799

Hi guys, Having a weird issue with a Dom0. When we were running 2.6.18.8 kernel the server would lock up every 2 weeks for no reason. Its been a difficult one to resolve as there are no errors. We have now upgraded to 2.6.32.13 and the lock ups are more often. For example today it crashed in the morning, then it was rebooted and it crashed again about 5 hours later, no logs. The

Hi. I understand that device aliases (e.g. eth2:3) are not shapeable. Does anybody know if this functionality is planned in the future? Anyway, for the time being the only option that seems to leave is to fwmark packets differently for each device alias and then shape based on that. Is it possible to set multiple marks on the packets? Alternatively, is it possible to check for a specific

Sorry about this one being long, and I apologise beforehand if there is something obvious here that I have missed. I am new to creating my own functions in R, and I am uncertain of how they work. I have a data set that I have read into a data frame: > gctable[1:5,] refseq geometry X60_origin X60_terminus length kingdom 1 NC_009484 cir 1790000 773000 3389227 Bacteria 2

Hi there, I run tinc with not ConnectTo, (and it can't tcp-connect to the relevant other tincd, because that tincd is behind a firewall --> that tincd usualy connects to my tincd). If I start that tincd alone (not connected at all) and do a ping some_other_ip, it gets a SIGBUS in route.c:207 in the function route_ipv4_unreachable at the line: hdr->ip_v = 4; This seems to be an