similar to: Strategy for about 200 part-time users

in HTB use 2 bucket for manage 2 rate??? first bucket -> keep token for sending with rate second bucket -> keep ctoken for sending with ceil rate Is it true?? may be i''m misunderstand about token/bucket thoery _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi! Some time ago I faced a problem in limiting traffic on host with multiple uplinks. Since all the stuff worked nice seemed that there will be no problems. But then I realized that P2P users are smart enough to bypass limits as sfq doesn''t give fair sharing in this case (thousands of connections from one user versus few from the other). I tried IMQ but it''s instability in my

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Hi all, based on the information in the "Linux Advanced Routing & Traffic Control HOWTO", I was trying to set up traffic shaping on my firewall. While I found the HOWTO very useful, in the process I ran into some problems that I did not forsee: According to the HOWTO it seems that it should have worked, even after spending some time going through the sections looking for answers,

Hi to all, i''m following this guide (http://www.opalsoft.net/qos/DS-28.htm), is very detailed, but i''m a bit confused about queuing disciplinse of leaf classes. In this guide the author uses PFIFO (see the scheme that i attached at message) in this way: # tc class add dev eth0 parent 1:21 handle 210: pfifo lmit 10 # tc class add dev eth0 parent 1:22 handle 220: pfifo lmit 10 #

Hi, I appologise for the bad ettiquite of this, but I have tried looking for some HTB examples that would help me, and am having trouble understanding how the tc filters should work, but I can''t figure out why this isn''t working. I''ve written this script, based upon the ultimate traffic shaper at LARTC, to try and shape for me and my 3 housemates. The idea being to

Hello there, I''m having lots of problems with my setup here. Let me explain: I am network administrator for my university dorm. We are about 300 users, and we have 2 ADSL connections doing load balancing with 300kbits upstream and 2Mbit downstream. The load balancing is working great, we are doing connection tracking so I can mark and hence prioritize interactive traffic and ACKS

Hell I''m new to Qdisc programming and I was wondering, what is the difference between using an internal Qdisc (like e.g. TBF does) vs. not using internal Qdisc (like e.g. SFQ does)? Can someone give me a quick rundown of pro and cons? with regards R.harper _________________________________________________________________ Undgå pop-ups med MSN Toolbar - http://toolbar.msn.dk hent den

Dear list: I have a problem I cannot handle yet, and need to solve it as soon as possible. Would be very greatful with anybody who can help me. I have a 512/512 link to internet, that I want to share between several computers. I have eth0, with a public IP address, conected to Internet, and also, eth1, with a private IP address, for network with the surfing computers. I have a main class with

Hi, I am trying to control bandwidths of the connections by using TC with HTB. But I want to implement Leaky Bucket on this structure so as to have a straight flow. Due to being new in this area, could anyone help me how I could do this? Does TC support leaky bucket? Best regards, Fatih Duzova

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

OK, here it is. Near perfect bandwidth calculation for ADSL users. Patch iproute2 with the HTB stuff and then this: It''s still a hack (as far as I can tell) because we are patching the rates tables, and hence I think it is only loosly coupled with the actual calculation of bytes in each bucket. However, it works very nicely for me! I have only been lightly testing with

Hello list. I''ve configured a very simple script to slow down packets coming from a particular IP Address. I''ve used IPTABLES to mark traffic coming from this IP Address, but it does not appear to be working as expected. Let me first describe my system as maybe what I''m doing is beyond what NETFILTER can do. I have one machine that runs all my servers as

I thought I had this all worked out, but it seems not. The following tc configuration: tc qdisc del dev ppp0 root 2> /dev/null > /dev/null tc qdisc add dev ppp0 root handle 1: tbf rate 120kbit burst 1200 limit 1 tc qdisc add dev ppp0 parent 1:1 handle 2: prio bands 3 tc qdisc add dev ppp0 parent 2:1 handle 10: sfq perturb 20 tc qdisc add dev ppp0 parent 2:2 handle 20: sfq perturb 20 tc

Hey, one more question for ipp2p iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --restore-mark iptables -t mangle -A DSL-IN -p tcp -m mark ! --mark 0 -j ACCEPT iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j MARK --set-mark 7 iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --save-mark iptables -t mangle -A DSL-IN -p udp -m ipp2p --ipp2p -j MARK

Hi all, I have read the larc howto and I need to apply a traffic shaper with this configuration: router / two interface etho and eth1 lan lan is on eth1 and on eth0 I''ve the dsl connection (1.2 Mbit / 256 kbit) I need to limit the bandwith towards lan and I''ve thought at HTB and tcng. I write the script belove. I want limit the p2p and ftp (ssh and irc) connection at 15

Hi guys, I want to priorize traffic comming down from internet on my ppp0 int I want port 80 and 21 (and others ) to have preference over P2P traffic, I don''t want to bann P2P just give to it less prio than other more vital services... does anyone know how to do it or where to read on. Thanks in advance

Dear all, I''m reading codes in sch_sqf.c in kernel 2.4 of Linux. I find I messed up with the concept of slot, bucket and hash tables. Could anyone explain the data stucture of the hash tables a little to me. Thanks very much. Best, Franklin BTW: I can not understand why the number of entries of dep[SFQ_DEPTH*] should be twice:( _______________________________________________ LARTC

Hi I have to manage a network with approx. 200 users, a 256kbit/s unmanaged Internet connection and a 3Mbit/s unreliable managed Internet connection (only http/ftp-proxy and ssh available). All users are in one Class C Subnet with 512 IP-Addresses. 60% of the machines are Windows. The rest are SUN and Linux. At the moment Windows viruses and p2p-traffic eats most of our bandwidth. My Aims are:

Hello! I''ve read a lot of mail archives, but can''t find solutions for my problem. I have router with about 700 users. I''m using HTB with SFQ leaf qdiscs for every user (client ip). So, different IP can have its own rate limit. This scheme ir working fine for a long time. But how can I limit number of connections (sessions) from one host? I see from ip_conntrack