Re: [LARTC] Load Balance and SNAT problem.

John Chang написа: I am developing load balancing router, But I have a question about fail over. The follow diagram is my test environment and scripts. --- Environment Setting PC1(192.168.10.2 http://192.168.10.2) | (LAN) |

Re: [LARTC] shaping using source IP after NAT

Ethy H. Brito написа: On Mon, 11 Jun 2007 22:02:31 +0300 VladSun [EMAIL PROTECTED] wrote: TC is performed after POSTROUTING, so you can not do any IP related TC filtering. You can use CPU friendly patches for iptables like IPMARK or IPCLASSIFY. Take a look at them. Ok. Can someone

Re: [LARTC] u32 classifier

Catalin Bucur написа: VladSun wrote: terraja-based написа: Hi folks...!!! I´ve a problem that i did not solve it. i want to limit the DOWNLOAD to my hosts (upstream traffic for the firewall) using IMQ, If i classify by PORT (source or destination) all seems to be fine, but...BUT...if i

Re: [LARTC] u32 classifier

terraja-based написа: Hi folks...!!! I´ve a problem that i did not solve it. i want to limit the DOWNLOAD to my hosts (upstream traffic for the firewall) using IMQ, If i classify by PORT (source or destination) all seems to be fine, but...BUT...if i want to restrict by IP addresss (internal IP

Re: [LARTC] big problem with HTB/CBQ and CPU for more than 1.700 customers

Luciano Ruete написа: Or you can use my patch - IPCLASSIFY. Then the rules above would be substituted by a signle rule per direction: iptables -t mangle -A FORWARD -s 192.168.1.0/24 -j IPCLASSIFY --addr=src --and-mask=0xff --or-mask=0x11000 iptables -t mangle -A FORWARD -d 192.168.1.0/24 -j

Re: [LARTC] big problem with HTB/CBQ and CPU for more than 1.700 customers

Alexandru Dragoi написа: u32 hash filters is the key, as somebody pointed. You can also tune your iptables setup, like this #192.168.1.0/24 iptables -t mangle -N 192-168-1-0-24 iptables -t mangle -A FORWARD -s 192.168.1.0/24 -j 192-168-1-0-24 iptables -t mangle -N 192-168-1-0-25 iptables -t

Re: [LARTC] big problem with HTB/CBQ and CPU for more than 1.700 customers

Pablo Fernandes Yahoo написа: Hello, have HTB „rules“ in 4 different ISPs and i control for each customer this way: Flush and 1:0 class tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1:0 htb tc class add dev eth0 parent 1:0 classid 1:1 htb rate 100mbit tc qdisc del dev

Re: [LARTC] IPCLASSIFY - patch based on IPMARK

Sorry! The packet has been modified since I wrote this message. The new URL is: http://openfmi.net/frs/download.php/410/IPCLASSIFY.zip Luciano Ruete написа: On Thursday 17 May 2007 07:56, VladSun wrote: Hello everybody! Some time ago I've decided that using the MARK property of the Linux

[LARTC] IPCLASSIFY - patch based on IPMARK

Hello everybody! Some time ago I've decided that using the MARK property of the Linux IP packet structure for the needs of traffic control is not very useful. So I wrote an iptables patch called IPCLASSIFY. It is fully based on IPMARK but it uses the PRIORITY field instead of MARK. The

Re: [LARTC] Newbie: Route some traffic through a pptp tunnel

Mogens Kjaer написа: I have a centos 4 i386 machine that works like a router (iptables filter, NAT) with two NIC's. One NIC is connected to my ISP (100 Mbit FTTH), I get a DHCP assigned public IP that changes sometimes. Most incoming ports are blocked by my ISP. In order to get a fixed IP and