similar to: Intermediate Interface?

Hello! My goal is to setup an ingress traffic shaping on my PPPOE DSL line with ifb. My old imq stuff used iptables marks (like ''iptables -t mangle -A PREROUTING -p tcp --sport 22 -m length --length :500 -j MARK --set-mark 31'') to classify the traffic and since i am lazy, i tried to to reuse them with ifb. But no luck: iptables marks the packets well, but tc

AHOI! I've big trouble by setting up CentOS 6.3 for my new vDSL. As I've found out, the German Telekom is using VLAN7 for her internet-(data) connections. => http://workaround.org/blog/vdsl O.K. what I've done: The NIC where's my DSL-modem is connectet is eth0. cat /etc/sysconfig/network-scripts/ifcfg-eth0 # device for vDSL-modem DEVICE=eth0 HWADDR=00:30:1B:14:08:67

List Out of interest, I use transparent squid proxies for caching websites, and I shape the clients that browse the net, this all works perfectly so no questions in this regard... CLIENT <--- eth0 ----> SQUID <----- ppp0 -----> NET What I just realised was that all egress traffic on eth0 gets shaped, squid gets data from ppp0 and hence is not shaped. Does this mean that squid

I am successfully running ingress (IMQ) and egress (HTB) shaping on a bridge. Is there any way to combine and share the bandwidth between ingress and egress? Example: I have set up www service for egress at 128 KB and ingress at 256 KB. The shaping on them works fine separately. However, I want to create a single virtual pipe for www traffic and limit both ingress and egress combined to 256 KB.

Hi! I am learning tcng without having experiance of tc and I am trying to build something that shall schedule traffic dependent on the value in the IPv4 packets ip_ttl field. I have read the tcng reference manual and cannot find information about forwarding. Is it possible to farward packets from ingress to egress without sending them upwards in layers?

Hi all I''m new to this list, but not exactly to iproute stuff. I''d like to solve a specific problem with bandwidth coming from different external sources towards the internal network (also the other way around, but I figure that''s not so much a problem, since that is egress traffic shaping). The network looks like this: internet ------ ISP-------[shaping/router]

Hi, I''m having issues with policing my incoming traffic by matching packet marks made by iptables. I''ve checked as many sites and guides as I can find, and I seem to be doing the exact same thing as they all are, but there''s still no success. As such, I was wondering if anyone can have a quick look to see if I''ve done anything obviously stupid? Essentially, I

Hi Roy, Strange. "kernel will resend then together with new ones" - this is interesting, since the firewall DOES know how to drop locally generated packets and the kernel doesn''t attempt to retry them. I am not an expert on this, but I think it might be interesting to check how the firewall does this. Another option would be to trick the kernel that the packet has been

Hi all I started playing with tcng to generate my tc rules, but I have some difficulty implementing my rules... The script below generates an error: # Device eth0 tc qdisc add dev eth0 ingress beginner.tc:2: don''t know how to build meter for this The script is below, I changed the real IP numbers for XXs and YYs, since it doesn''t really matter what they are. eth0 is the

Hi, I am trying to do both ingress and egress bandwidth management on a bridge. eth0 is the WAN interface. IPTraf shows that the following script is running successfully and it limits bandwidth both ways to 256 KB However when I want to see the statistics using tc - it only shows me stats for htb class and not for ingress class. The tc output is as follows: tc -s -d class show dev eth0 class

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all! when I activate wondershaper on my dsl connection (pppoa vc mux), i get three errors: # sh -x /usr/sbin/wshaper ppp0 + /usr/sbin/xmlstarter setenv tc_downlink + DOWNLINK= + /usr/sbin/xmlstarter setenv tc_uplink + UPLINK= + [ -z ] + cat /proc/avalanche/avsar_modem_stats + grep Connection Rate + awk {printf("%d", $8)} +

Hello Tom! After i read and analyze some docs about IFB i decide that for implement this feature in Shorewall not need more efforts (of course i may be wrong). If we have 'ifb0' device then we must activate ingress discipline on real device (f.e. eth2) and redirect 'egress' from it to 'ifb0'. tc qdisc add dev eth2 ingress tc filter add dev eth2 parent ffff: protocol ip

Hi ! I wanted to shape my analog modem connection so I took these two lines from the ''wondershaper'' script: tc qdisc add dev $DEV handle ffff: ingress #tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip \ src 0.0.0.0/0 police rate ${DOWNLINK} burst 10k drop flowid :1 with DEV=ppp0 and DOWNLINK=24kbit. But, when I activate it, nothing comes back from the

I have two interfaces, eth0 and eth1 but i can''t discern the egress traffic than ingress traffic. I need to apply htb qdisc in both directions, and I read that I need the IMQ patch to do this, because in ingress qdisc i can''t apply htb qdisc...but where is the ingress qdisc? affect the traffic that goes from eth0 to eth1 or is for the traffic that goes from eth1 to eth0?

Hi all, Supposedly my router is itself streaming traffic to clients. Is it possible for it to mark its packets before going through dsmark?? I have gone through the examples in iproute2/examples, i noticed that there''s always an ingress and egress of which these are 2 different dev. Is it possible for before ingress and egress be the same dev?? I tried the script below but

hi all. i really need help. i need a working example on shaping the ingress per user using tcng without IMQon a mechine which has two interfaces, and acts like a firewall, and NAT for intrenet connection sharing: eth0 is the external facing the Internet. eth1 is the internal towards my LAN/office network. Please i dont want other than tcng code. iptables code i read on some pages seems

I''ve network with NATed hosts. I want to catch only all traffic going from my server, but I don''t want catch NATed traffic from LAN. I need only traffic going from/to my server (traffic from INPUT, OUTPUT chain in iptables) (like SSH, postfix, WWW or proxy). This is throw all traffic from my LAN to IFB: $TC qdisc add dev $iface_lan handle ffff: ingress $TC qdisc add dev

I''m trying to do some very simple rate-shaping on an interface. I want to limit my 100baseT interface to 7 megs both ingress and egress of the interface. I''ve been hacking my way through the documentation and some examples and I''ve come up with the following configuration for tcng that seems to do what I want. I''m curious if some of the other experts out

>From netdev@oss.sgi.com: ----- Forwarded message from jamal <hadi@cyberus.ca> ----- X-Original-To: sebek@localhost X-Received-Date: Mon, 12 Apr 2004 03:25:37 +0200 (CEST) Subject: (Long) ANNOUNCE: IMQ replacement WAS(Re: [RFC/PATCH] IMQ port to 2.6 From: jamal <hadi@cyberus.ca> Reply-To: hadi@cyberus.ca To: "Vladimir B. Savkin" <master@sectorb.msk.ru> Cc:

Hi, I have a Debian that is connected to Internet in eth0, and to a LAN in eth1. I wanted to control traffic with HTB, dividing it depending on what kind of traffic is (Mail, Application Server and others). Would it be good to use HTB qdisc in eth0 egress to control outgoing traffic and HTB qdisc in eth1 egress to control incoming traffic? Or the only way to control incoming traffic is with eth0