similar to: Short Packets Dropping Problems when using linux router

Hello I was testing HTB using IPerf TCP traffic and the results were very good. Until I tried to add some UDP traffic the results were a little strange. this is my setup tc qdisc del dev eth1 root tc qdisc add dev eth1 handle 1:0 root htb default 2 tc class add dev eth1 parent 1:0 classid 1:1 htb rate 1mbit tc class add dev eth1 parent 1:1 classid 1:2 htb rate 500kbit ceil 1mbit tc class add

Hi, I am trying to implement a simple scaled-down version of the AF traffic class type. As such I basically want to remark non-conforming AF11 packets to AF13. Here is m script that I have been using on the ingress router of my network: ---------------------------------------- Link=''dev eth1'' Rate1=''rate 800Kbit'' Rate2=''rate 2500Kbit''

Hi ; +--------+ +-----------+ +--------+ | server |---------- | linux box |---------------------| Client | +--------+ +-----------+ +--------+ MY script: tc-htb3 qdisc del dev eth1 root ipchains -F tc-htb3 qdisc add dev eth1 root handle 10: htb default 20 r2q 40 tc-htb3 class add dev eth1 parent 10: classid 10:1 htb

Hi there, I have a little problem. I had this some months ago but didn''t solve it back then. I have patched my kernel with Layer 7 support and patched my iptables to support it, too. Now I inserted this line in my firewall script on my router for testing purpose: $IPTABLES -t mangle -A POSTROUTING -o $INET_IFACE -p tcp -m layer7 --l7proto http -j DROP It works, BUT only if the

Hi, below are some test results from implementing a prio qdisc ''that is also below''. The qdisc is attacted to a vlan interface for my external network. Both tests were run at the same time. The links are policed at 6.0M ''by our provider''. 192.168.70.1 --> 192.168.30.1 My question is: If using a prio qdisc should''nt the iperf run with a tos of b8 have

Hello everybody, I have a Linux router with an ethernet adapter and a ADSL device. My router has a GRE tunnel connected to a remote IP address. Using "tc" I have configured 3 different classes: 1. 290kbit rate (used for Voip Services) 2. 180kbit rate (used for GRE tunnel) 3. 80kbit rate (for generic data traffic) For each class, using "iperf", I send some data from a PC

Hi again, I just ran into a seriously strange glitch, and was wondering if anybody had experienced this... I have an HTB class with an iptables classifier. The iptables classifier shows packets hitting the rule for this class. Now, HTB drops these packets (''dropped'' increases), even although the packets are small, and there are over 10000 tokens available. Is there any

I just want to limit bandwidth on a particular link. Specifically, one machine (PC1) is on wired LAN and other (PC1) on a WLAN, acess point for which is on the same LAN. Both machines have static ip addresses (AD1 and AD2) and I want to limit the bandwidth utilization of certain udp traffic from PC2 to PC1. Is is possible to do this using iptables and tc (controlling from PC1 as that has both

Hey guys, I have several Linux routers in place at high-usage locations (student apartment complexes). I''m having trouble with some of the routers which use 6Mbit DSL lines as their Internet feed. The routers use PPPoE and perform NAT. During peak usage periods, the routers are dropping alot of packets. I''m lead to believe this is because there are too many active

Hi All, I''m using iptables-1.2.7a on RedHat8 kernel 2.4.20. I wanted to limit the file-sharing traffic to the internet. I marked the packets with iptables: iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1024:1862 -j MARK --set-mark 1 iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1864:65535 -j MARK --set-mark 1

Hello, I''m using a script with tc, to limit my outgoing traffic : tc qdisc add dev eth0 root handle 1: htb tc class add dev eth0 parent 1: classid 1:1 htb rate 500kbit burst 6k tc filter add dev eth0 parent 1: protocol ip prio 1 u32 match ip dst 172.28.54.9 flowid 1:1 I want to test bandwidth with iperf to see if limitation is correct. Sometimes, I get correct measure for certain rates,

Hi, I''m trying to police the incoming traffic by using ingress qdisc,this is what I have in my script tc qdisc add dev eth0 handle ffff: ingress tc filter add dev eth0 parent ffff: protocol ip prio 4 \ handle 1: u32 divisor 1 tc filter add dev eth0 parent ffff: protocol ip prio 4 u32 \ match ip dport 4001 0xffff \ police rate 2000kbit burst 50k drop \ flowid

I´m shaping with htb with a kernel 2.4.25 compiled with PSCHED_CPU. What i´m noticing (in mrtg) is that traffic coming in to eth0 (internet side) is much bigger than eth1(Lan side). I think this is due to packets being dropped right? In this case, is there any way to avoid this? because right now traffic coming from the router is being wasted right? This is the output of tc: tc -s class show

I''m looking for a way to configure a qdisc or filter to drop all packets. The logic behind this is that I''m using the u32 hashing tables to get move my filters from iptables to tc filters. This will translate into much less per-packet processing for me. However, I need a way to drop any packets that don''t match any of the filters. Paul C. Diem PCDiem@FoxValley.net

Hello all, I am testing CBQ and HTB these days and I got a lots problem which needs your help. It is a little long text :) Thank you! (All my test is based on Redhat Linux9.0) 1.Is isolated of CBQ working? I have read Mr. stef word that he never made cbq isolated work. 2. I have setup an environment to test cbq: one tcp flow which I should protect and a noisy udp flow who will eat much of the

Hi all I need to use three 512 kbps aDSL internet connections, in a load-sharing, link-failover scenario. Presently I am using Ipcop with a single DSL. Now, I seem to have two options...one..an Edimax quad wan port adsl router, with firewalling and NAT and second install a minimal linux distro for routing...something on the lines of LARTC....and keep NATTING, IDS & Firewalling on the linux

Hi all, i''m new at LARTC, and after reading the docs I found no solution to my problem ... On one side I have eth0 conected to the LAN, on the other side I have eth1 conected to a switch and to 3 DSL routers with 3 diferent providers, and also eth2 conected to a cisco 2600 conected to a LDMS line. I have readed the larct docs about multihomed conections to internet, but I''m

Hi. I want to drop silently locally generated packets on a specific interface. I tried 2 approaches: tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1: htb tc filter add dev eth0 parent 1: proto ip u32 match ip dst 10.10.10.1 flowid 1:1 police conform-exceed drop/drop tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1: prio bands 2 priomap 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

I''ve been following the HOWTO, and reading mailing list discussions about throttling bandwidth, and have had some success, but I just want to tie off some loose ends. Essentially what I am wanting to do is to keep our bandwidth usage below 1megabit, because if we go over we get charged for that traffic. I''ve used some of the examples from the HOWTO to limit our bandwidth, but I

hello! i have the following problem: i have a pc, which has one (eth0) NIC. eth0 is connected to two other linux machines acting as routers to the internet. i want to classify packets outgoing from my PC. i want to mark packets that are routed through 1. router with mark 1 and the others packets routed throuhg router 2. with mark 2. i had following ideas: -using destination MAC -using route