Re: [LARTC] htb + tc filter

[choros]

Hi, thanks for replay, i will include the whole script.. iptables -t mangle -F  2>/dev/null iptables -t mangle -X  2>/dev/null iptables -t mangle -N markov iptables -t mangle -I PREROUTING -j markov iptables -t mangle -N markov2 iptables -t mangle -I POSTROUTING -j markov2 unalias a unalias s unalias d echo 'clear; tc -s class sh dev eth0 | grep p'> /usr/bin/a echo 'clear; tc -s class sh dev eth1 | grep p'> /usr/bin/s echo 'clear; tc -s class sh dev eth2 | grep p'> /usr/bin/d chmod +x /usr/bin/a /usr/bin/s /usr/bin/d alias s0='clear; tc -s class sh dev eth0 | grep p' alias s1='clear; tc -s class sh dev eth1 | grep p' alias s2='clear; tc -s class sh dev eth2 | grep p' alias s3='clear; tc -s class sh dev eth3 | grep p' alias z='clear; tc -s class sh dev ' tc qdisc del dev eth0 root >/dev/null 2>&1 tc qdisc del dev eth1 root >/dev/null 2>&1 # whole interface eth0 - 1024 kbps tc qdisc add dev eth0 root handle 10: htb default 20 tc class add dev eth0 parent 10: classid 10:2 \  htb rate 1024Kbit tc filter add dev eth0 parent 10: protocol ip prio 1 u32 \          match ip dst 0.0.0.0/0 flowid 10:2 # outgoing class for eth1 - 1024 kbps tc class add dev eth0 parent 10:2 classid 10:21 \ htb rate 1024Kbit # mark for it tc filter add dev eth0 parent 10:2 protocol ip prio 1 \ handle 1 fw classid 10:21 echo eth0 '-->' from eth1 total 1024 kbps, weight 102, tc qdisc add dev eth0 parent 10:21 sfq perturb 15 echo eth0 '-->' 1024 kbps total # whole interface eth1 - 1024 kbps tc qdisc add dev eth1 root handle 11: htb default 20 tc class add dev eth1 parent 11: classid 11:2 \  htb rate 1024Kbit tc filter add dev eth1 parent 11: protocol ip prio 1 u32 \          match ip dst 0.0.0.0/0 flowid 11:2 tc qdisc add dev eth1 parent 11:2 sfq perturb 15 iptables -t mangle -A markov -i eth1 -j MARK --set-mark 1 echo eth1 '-->' 1024 kbps total Jorge Andreas Klauer wrote: On Wednesday 28 September 2005 15:30, choros wrote: the last filter should pass all traffic whitch dont pass the filters to class 10:2 but this is not the case. I'm not sure the order you add filters is actually the order filters are traversed... so why not use the prio parameter to make sure that your catchall comes last? A completely different approach would be to just put the traffic you don't want to be shaped into a HTB class as well, by putting a fat class on top, like this: HTB Qdisc | \--- HTB root class (100mbit) | \--- HTB internet class (256kbit) \--- HTB lan class (100mbit minus 256kbit) (I'm actually using a value lower than 100mbit though - due to overhead and other issues, in a 100mbit network you can never actually reach the full 100mbit speed). That way, I get packets that come from the internet and go to the LAN shaped down to 256kbit, while internal lan traffic (e.g. router is also a fileserver for the local network) can go by unaffected. By the way, if you let this internal lan traffic go by completely unshaped, chances are that load gets so high it will even choke the internet connection. So even if the packets are allowed to go fast, it's a good idea to shape them in order of guaranteeing a 256kbit or whatever channel for internet. HTH Andreas Klauer _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc