[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



Here is a good link for getting a start.  But your already up!!! ;-)

<a  rel="nofollow" href="http://lartc.org/howto/lartc.qdisc.classful.html#AEN939";>http://lartc.org/howto/lartc.qdisc.classful.html#AEN939</a>

Shorewall firewall has iproute2's HTB, Hierarchical Token Bucket filter, 
traffic shaping built into it.  Hope this helps,
Dow


Christopher Fowler wrote:
&gt; Do I need to run cbq.init before or after my NAT rules?  I'm not seeing
&gt; any change and my cbq files look like this:
&gt; 
&gt; [root at firewall cbq]# cat cbq-0002         
&gt; DEVICE=eth0,10Mbit,1Mbit
&gt; RATE=7000bps
&gt; WEIGHT=700bps
&gt; PRIO=5
&gt; RULE=192.168.1.6
&gt; [root at firewall cbq]# cat cbq-0003
&gt; DEVICE=eth1,10Mbit,1Mbit
&gt; RATE=7000bps
&gt; WEIGHT=70bps
&gt; PRIO=5
&gt; RULE=192.168.1.6,
&gt; [root at firewall cbq]# 
&gt; 
&gt; I put the numbers real low so I can see from the outside if there was
&gt; some throttling going on.
&gt; 
&gt; I'm using kernel 2.4.25
&gt; 
&gt; Here is status output:
&gt; [root at firewall cbq]# cbq.init stats 
&gt; ### eth0: queueing disciplines
&gt; 
&gt; qdisc cbq 1: rate 10Mbit (bounded,isolated) prio no-transmit
&gt;  Sent 1967746 bytes 21306 pkts (dropped 0, overlimits 0) 
&gt;   borrowed 0 overactions 0 avgidle 624 undertime 0
&gt; 
&gt;  
&gt; ### eth0: traffic classes
&gt; 
&gt; class cbq 1: root rate 10Mbit (bounded,isolated) prio no-transmit
&gt;  Sent 1967746 bytes 21306 pkts (dropped 0, overlimits 0) 
&gt;   borrowed 0 overactions 0 avgidle 624 undertime 0
&gt; 
&gt; ### eth0: filtering rules
&gt; 
&gt; filter parent 1: protocol ip pref 100 u32 
&gt; filter parent 1: protocol ip pref 100 u32 fh 800: ht divisor 1 
&gt; filter parent 1: protocol ip pref 100 u32 fh 800::800 order 2048 key ht
&gt; 800 bkt 0 flowid 1:2 
&gt;   match c0a80106/ffffffff at 16
&gt; 
&gt; ### eth1: queueing disciplines
&gt; 
&gt; qdisc cbq 1: rate 10Mbit (bounded,isolated) prio no-transmit
&gt;  Sent 988234 bytes 11360 pkts (dropped 0, overlimits 0) 
&gt;   borrowed 0 overactions 0 avgidle 605 undertime 0
&gt; 
&gt;  
&gt; ### eth1: traffic classes
&gt; 
&gt; class cbq 1: root rate 10Mbit (bounded,isolated) prio no-transmit
&gt;  Sent 989306 bytes 11368 pkts (dropped 0, overlimits 0) 
&gt;   borrowed 0 overactions 0 avgidle 605 undertime 0
&gt; 
&gt; ### eth1: filtering rules
&gt; 
&gt; filter parent 1: protocol ip pref 100 u32 
&gt; filter parent 1: protocol ip pref 100 u32 fh 800: ht divisor 1 
&gt; filter parent 1: protocol ip pref 100 u32 fh 800::800 order 2048 key ht
&gt; 800 bkt 0 flowid 1:3 
&gt;   match c0a80106/ffffffff at 12
&gt; 
&gt; 
&gt; I originally tried it on another machine that I was using bridging on 2
&gt; interfaces but bridging happens before ip filters.
&gt; 
&gt; Here is my ifconfig output for my firewall.
&gt; 
&gt; [root at firewall cbq]# ifconfig eth0
&gt; eth0      Link encap:Ethernet  HWaddr 00:C0:26:63:61:10  
&gt;           inet addr:66.23.198.2  Bcast:66.23.198.3  Mask:255.255.255.252
&gt;           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
&gt;           RX packets:20078 errors:0 dropped:0 overruns:0 frame:0
&gt;           TX packets:25176 errors:0 dropped:0 overruns:0 carrier:0
&gt;           collisions:0 txqueuelen:100 
&gt;           RX bytes:2481827 (2.3 Mb)  TX bytes:2359557 (2.2 Mb)
&gt;           Interrupt:11 Base address:0xd000 
&gt; 
&gt; [root at firewall cbq]# ifconfig eth1
&gt; eth1      Link encap:Ethernet  HWaddr 00:E0:C5:BC:00:5A  
&gt;           inet addr:192.168.1.254  Bcast:192.168.1.255 
&gt; Mask:255.255.255.0
&gt;           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
&gt;           RX packets:18957 errors:0 dropped:0 overruns:0 frame:0
&gt;           TX packets:15340 errors:0 dropped:0 overruns:0 carrier:0
&gt;           collisions:6 txqueuelen:100 
&gt;           RX bytes:1456185 (1.3 Mb)  TX bytes:1639726 (1.5 Mb)
&gt;           Interrupt:10 Base address:0xf000 
&gt; 
&gt; [root at firewall cbq]# 
&gt; 
&gt; What I like about this script is that there is a compile command.  It
&gt; outputs the commands it executes.  This give me a chance to learn the
&gt; commands.
&gt; 
&gt; Thanks again,
&gt; Chris
&gt; 
&gt; 
&gt; On Sat, 2004-04-24 at 16:08, Dow Hurst wrote:
&gt; 
&gt;&gt;I was using the cbq script to do it on a whole interface.
&gt;&gt;
&gt;&gt;Here is the link to the script.  It is pretty simple to work with and very 
&gt;&gt;effective on an interface.  It may do what you want depending on the queues 
&gt;&gt;that are set up.
&gt;&gt;Dow
&gt;&gt;
&gt;&gt;<a  rel="nofollow" href="http://sourceforge.net/projects/cbqinit";>http://sourceforge.net/projects/cbqinit</a>
&gt;&gt;
&gt;&gt;
&gt;&gt;
&gt;&gt;
&gt;&gt;
&gt;&gt;
&gt;&gt;Christopher Fowler wrote:
&gt;&gt;
&gt;&gt;&gt;Maybe someone knows how to do this.  I have one machine on my network
&gt;&gt;&gt;that I want to modify its upload speed.  I have a 1.5/256 ADSL
&gt;&gt;&gt;connection.  On this one machine I would like to limit upload speeds
&gt;&gt;&gt;to the equivalent of a 56k modem.  I want download speeds to remain
&gt;&gt;&gt;normal.  I will implement the rule on my firewall.  Does anyone know how
&gt;&gt;&gt;to do this?
&gt;&gt;&gt;
&gt;&gt;&gt;Thanks,
&gt;&gt;&gt;Chris
&gt;&gt;&gt;
&gt;&gt;&gt;_______________________________________________
&gt;&gt;&gt;Ale mailing list
&gt;&gt;&gt;Ale at ale.org
&gt;&gt;&gt;<a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt;&gt;&gt;
&gt; 
&gt; 
&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; 

-- 
__________________________________________________________
Dow Hurst                  Office: 770-499-3428            *
Systems Support Specialist    Fax: 770-423-6744            *
1000 Chastain Rd. Bldg. 12                                 *
Chemistry Department SC428  Email:   dhurst at kennesaw.edu   *
Kennesaw State University         Dow.Hurst at mindspring.com *
Kennesaw, GA 30144                                         *
************************************************************
This message (including any attachments) contains          *
confidential information intended for a specific individual*
and purpose, and is protected by law.  If you are not the  *
intended recipient, you should delete this message and are *
hereby notified that any disclosure, copying, distribution *
of this message, or the taking of any action based on it,  *
is strictly prohibited.                                    *
************************************************************


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="01070" href="msg01070.html">[ale] QoS Question</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="01073" href="msg01073.html">[ale] QoS Question</a></strong>
<ul><li><em>From:</em> dhurst at kennesaw.edu (Dow Hurst)</li></ul></li>
<li><strong><a name="01083" href="msg01083.html">[ale] QoS Question</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg01122.html">[ale] Office cooling</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg01124.html">[ale] FS: Sharp Zaurus SL-5600</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg01083.html">[ale] QoS Question</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg01078.html">[ale] Jam Studio drawing tablet?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#01123"><strong>Date</strong></a></li>
<li><a href="threads.html#01123"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>