similar to: HTB burstable for 2 interface , how ?

Hi, I am very new in this list.. I want each of my internet users to be limited in his/her usage of bandwidth. The limitation will be done in my squid (linux) box, as they all have to be authenticated by squid before going to the internet jungle.. Then anybody here could tell me where to begin to do such thing ? Any idea/solution would be very appreciated TIA regards, aqil

Hi, I managed to fix 128kbit for an IP address of 192.168.200.3 as below: - tc qdisc add dev eth3 root handle 1: cbq avpkt 1000 bandwidth 100mbit tc class add dev eth3 parent 1: classid 1:1 cbq rate 128kbit allot 1500 prio 5 bounded isolated tc filter add dev eth3 parent 1: protocol ip prio 16 u32 match ip dst 192.168.200.3 flowid 1:1 tc qdisc add dev eth3 parent 1:1 sfq perturb 10 How can I

Hi! I have read all informations i could find, but some things are still not clear. My setup is: ---INTERNET1(eth0)-\ /- Local net1 (eth2) GW ---INTERNET2(eth1)-/ \- Local net2 (eth3) I have NAT and a working setup using HTB,SFQ, classifying with the iptables -j CLASSIFY way. I shape only the traffic coming from the internet heading to the intranet. I would like

Objective: All web traffic originating from my proxy server should be forwarded through interface eth2 instead of the default eth0. The reply should take the same path back to the proxy server. Problem: On the return bout, the kernel doesn''t pass the packet to the higher layers. The reply seems to be getting tossed away between PREROUTING and INPUT Netfilter chains.

Hi all, I have setup two multipath route tables on my system for doing failover routing, What I want it''s that if GW at route1 of the MP is dead, traffic goes by route2, for doing that I have created the multipath routes as follows: ip route add table mail.traffic proto static nexthop via ${GW1} dev eth1 weight 1 nexthop via ${GW2} dev eth1 weight 250 But it does not run as I

I have tried using iptraf for my NAT firewall to analyse the IP traffic. Basically I am faced with this difficulty of related the source IP to the outgoing interface to the internet, so I am wondering if anyone has a suggestion for a different ways to do it, or a suggestion for a better tool. Details :- Supposed : eth0 - LAN eth1 - WAN1 eth2 - WAN2 And then

Dear All, Sorry to trouble again..... After go through www.lartc.org I have implemented the HTB instead of CBQ for the same scenario. Now following files are under /etc/sysconfig/htb directory. eth0 DEFAULT=30 R2Q=10 eth0-2.root RATE=256kbps BURST=25k eth0-2:10.comp1 RATE=120kbps BURST=12k PRIO=0 LEAF=sfq RULE=192.168.200.0/24 eth0-2:20.comp2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a linux system with 4 ethernet interfaces, eth0 goes to the internet, eth1, eth2, and eth3 are NAT''d LANs. I want to use an ingress filter to prioritize bandwidth (downstream from internet) to various IPs. I want to sett it up something like this.... eth0 <--[NAT]--> dummy0 <---> dummy1 <---> eth1,eth2,eth3 dummy1

Hello everyone... I have a little trouble and need some help :P How can I check on which interface the packet is going (eth0, eth1; I have two ISP and on eth3 little LAN), using to check it TC and IMQ? (HTB script) I tried to mark packets, but on chain POSTROUTING this does not work... Maybe because packets fall on IMQ before signing. I tried marking it on FORWARD but packets also

Folks, I''m so surprised what happened to my box just in the few weeks lately. Here is my setup: INTERNET <----------> [eth0] SHAPER-BOX [eth1] <----------> USER-FARM both eth0 & eth1 got public ips (202.x.x.x) Why traffic monitored at eth0 is bigger than eth1 ? eth1 shaped just exactly the same as rate i defined in HTB. I just have 1024Kbps from my ISP and i defined the

Hi folks, I have three network cards on my Slackware box and eth0 and eth1 are for two Internet connections. They have imq0 and imq1. All traffic shaping works fine. Internal eth2 does no traffic shaping. But recently I have put two OpenVPN tunnels (tun devices) and both work via eth0. So my question is - how to shape the traffic on these tun0 and tun1 devices? Thanks Remus

hello . i have no problem shaping incoming traffic from WAN how do i shape outgoing traffic to WAN depending on the speed limit of each subnet .... ex: 10.10.6.0 --> 512kbps (DOWNLOAD / UPLOAD) 10.10.5.0 --> 256kbps (DOWNLOAD / UPLOAD) do i have to used forward handle, and used iptables -s 10.10.6.0/24 -d WAN -j MARK --set-mark 101 and used iptables -s 10.10.5.0/24 -d WAN -j MARK

Hello, does anyone have a working solution for the shaping both incoming and outgoing traffic in such way, that for a given client the *sum* of incoming and outgoing traffic is somehow defined? My ISP does the same thing, it gives me just a line of a defined rate, no matter the traffic direction (i.e. here is your line, the clock speed is 1024kbps, do what you want). I''m a litte bit

Hi I am search a sample config for my linux box: Shorewall 3.2.3 Eth0 => Internet Access 4Mbits on ethernet Eth1 => Lan Eth2 => Lan 2 Eth3 => Lan 3 i want limit the internet access: Eth1 = 2 Mbits Eth2 = 0,5 Mbits Eth3 = 1,5 Mbits but if eth1 don''t use 2 Mbits other lan can use it anyone have a simple sample config for help me ? Thanks bye

Hello, I use HTB with linux-2.4.20-ac1 and iptables-1.2.7a (pathced for IMQ). I configured one HTB qdisc on an IMQ device. This qdisc has some classes (about 5) and all of the classes has qdisc pfifo. I sometimes got out from my linux (while I was working) and I found in logs: Dec 4 11:49:27 core kernel: HTB init, kernel part version 3.7 Dec 4 11:49:28 core kernel: HTB: quantum of class

Hi. I understand that device aliases (e.g. eth2:3) are not shapeable. Does anybody know if this functionality is planned in the future? Anyway, for the time being the only option that seems to leave is to fwmark packets differently for each device alias and then shape based on that. Is it possible to set multiple marks on the packets? Alternatively, is it possible to check for a specific

Dear all, I have 3 backbones for my local network. 1st backbone: down 1024kbps, up 1024kbps through eth1 2nd backbone: down 2048kbps, up 2048kbps through eth2 3rd backbone: down 1024kbps, up 128kbps through eth3 Local network: 192.168.0.0/16 through eth0 Router: Linux Slakware 11 with iproute2 Please let me know how to shape both incoming and outgoing traffic for this case. LARTC doc only

Hello, I have HTB on IMQ device. My rate does not work as I configured. I configured 1920kbit/s and I can download only about 290kbit/s (while it should be the whole bandwidth). My script: /sbin/modprobe imq numdevs=1 /usr/local/sbin/tc qdisc del dev imq0 root 2> /dev/null > /dev/null /usr/local/sbin/tc qdisc del dev imq0 ingress 2> /dev/null > /dev/null /sbin/ifconfig imq0 down

Hello, I have eth0 - internet eth1..4 - local networks on eth0 i do $IPTABLES -A POSTROUTING -t nat -o eth0 -j MASQUERADE I want to balance out/in load for eth1..4 and localhost (mainly squid). Nat makes impossible to do it on eth0, so I installed IMQ. I need to get to on imq0 unnnated in/out traffic that I could make priorities for protocols and networks. Do somthing like this: prate=1Mbit

Hi all and tc Gururs i have patched the IMQ and htb to kernel, but when i do egress filtering, iam not able to see any traffic and excusted the following the commands modprobe imq numdevs=1 tc qdisc add dev imq0 handle 1: root htb default 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 100kbit tc qdisc add dev imq0 parent 1:1 handle 10: htb default 1 tc class add dev imq0 parent