[LARTC] can the htb applied to http/ftp server not in the router???
can someone help me?? - | server (http & ftp) | --> 1.2.3.4 - | | | -> 10/100 MB LAN | | | -- | client | -> 1.2.3.5 -- i want the client download file from http server with maximum rate is 30 kbps and download from ftp server with max rate is 60 kbps other use 10 kbps (total is 100 kbps), qos is set in the server... i want use htb tools that i have installed (linux kernel 2.4.20-8) i had read htb manual, but when i tried to download from client, the rate always 7mbps ( whereas i put ceil 100kbps at the root class ), i want to ask, can htb/lartc applied in the server not in the router??? if can, please someone post a tc command for a problem above!! thank you regards -fals- ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] UDP multicast stream and NAT
Hi, my ISP is streaming some local concert using UDP multicasting. I followed the instructions on the site which described how to set VLC in order to view the stream, but it didn't work. I am behind a Linux router/firewall doing NAT. Using google, I quickly found out that the netfilter/conntrack code doesn't support NATing multicast traffic. I thought about bridging the internet facing interface (eth0) and (one of) the internal interfaces (the one my computer is plugged into). This way I could set my IP to be public and no routing/NAT would be done on the Linux box. The only problem is that the box has 2 more NICs in it and there are other people connected to those NICs that need to use that connection (hence need to be NATed). Then I tried thinking about a DMZ-like solution where my box would be in the DMZ, but I can't see that working either because I only have one public IP assigned. Can anyone think of any other way for me to be able to view the stream? Thanks. -- Using Opera's revolutionary e-mail client: http://www.opera.com/mail/ __ Yahoo! DSL Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] can the htb applied to http/ftp server not in the router???
can someone help me?? - | server (http & ftp) | --> 1.2.3.4 - | | | -> 10/100 MB LAN | | | -- | client | -> 1.2.3.5 -- i want the client download file from http server with maximum rate is 30 kbps and download from ftp server with max rate is 60 kbps other use 10 kbps (total is 100 kbps), qos is set in the server... i want use htb tools that i have installed (linux kernel 2.4.20-8) i had read htb manual, but when i tried to download from client, the rate always 7mbps ( whereas i put ceil 100kbps at the root class ), i want to ask, can htb/lartc applied in the server not in the router??? if can, please someone post a tc command for a problem above!! thank you regards -fals- ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] HTB and GRED for AF and EF services
Hi, just wondering if this type of configuration would be possible for using AF and EF classes. HTB (6.0M) --GRED 5 (AF1) --HTB(1M) [is it possible to have this with a 1M rate and a 6M ceiling?] --GRED [3 greds using grio] VQ1 -3 --GRED 4 (AF2) --HTB(1M) --GRED VQ1 -3 --GRED 3 (AF3) --HTB(1M) --GRED VQ1 -3 --GRED 2 (AF4) --HTB(1.5M) --GRED VQ1 -3 --GRED 1 (EF) --HTB(1.5M) --GRED VQ1 -3 ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
RE: [LARTC] multicast over GRE tunnel
Title: [LARTC] multicast over GRE tunnel Hi, if this is for the purpose of using OSPF. You must setup Point-to-Point interfaces. That is when giving your local gre tunnel ip address you must also specify a peer address. jason From: [EMAIL PROTECTED] on behalf of Steve EckmannSent: Wed 12/7/2005 10:55 AMTo: lartc@mailman.ds9a.nlSubject: [LARTC] multicast over GRE tunnel I need to send multicast traffic through a GRE tunnel between two Linuxrouters. The tunnel works for normal IP packets, but I can't see how tomake it work for multicast. Here's the setup: 10.10.10.0/24 LAN-B--RtrB-RtrC--LAN-C 192.168.2.0/24 192.168.1.0/24 RtrB interfaces: eth0 192.168.2.1 eth1 10.10.10.11 RtrC interfaces: eth0 192.168.1.1 eth1 10.10.10.201 Tunnel setup on RtrB: ip tunnel add netC mode gre remote 10.10.10.201 local 10.10.10.11 ip link set netC up ip addr add 10.10.10.11 dev netC ip route add 192.168.1.0/24 dev netC Tunnel setup on RtrC: ip tunnel add netB mode gre remote 10.10.10.11 local 10.10.10.201 ip link set netB up ip addr add 10.10.10.201 dev netB ip route add 192.168.2.0/24 dev netBI'm stuck here. I tried adding routes for 224.0.0.0/4 and for a specificmulticast group (say 239.16.2.2) to the netB and netC "devices", but themulticast traffic isn't getting out of its source LAN. Are there ipcommands that will do it? Do I need additional software running formulticast? I couldn't get mrouted or pimd to compile on Fedora Core 4. Iinstalled xorp but haven't tried running it yet because I'm veryconfused about what is needed, besides the basic kernel and iproute2,for a multicast-capable Linux router.Thanks.___LARTC mailing listLARTC@mailman.ds9a.nlhttp://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] multicast over GRE tunnel
I need to send multicast traffic through a GRE tunnel between two Linux routers. The tunnel works for normal IP packets, but I can't see how to make it work for multicast. Here's the setup: 10.10.10.0/24 LAN-B--RtrB-RtrC--LAN-C 192.168.2.0/24 192.168.1.0/24 RtrB interfaces: eth0 192.168.2.1 eth1 10.10.10.11 RtrC interfaces: eth0 192.168.1.1 eth1 10.10.10.201 Tunnel setup on RtrB: ip tunnel add netC mode gre remote 10.10.10.201 local 10.10.10.11 ip link set netC up ip addr add 10.10.10.11 dev netC ip route add 192.168.1.0/24 dev netC Tunnel setup on RtrC: ip tunnel add netB mode gre remote 10.10.10.11 local 10.10.10.201 ip link set netB up ip addr add 10.10.10.201 dev netB ip route add 192.168.2.0/24 dev netB I'm stuck here. I tried adding routes for 224.0.0.0/4 and for a specific multicast group (say 239.16.2.2) to the netB and netC "devices", but the multicast traffic isn't getting out of its source LAN. Are there ip commands that will do it? Do I need additional software running for multicast? I couldn't get mrouted or pimd to compile on Fedora Core 4. I installed xorp but haven't tried running it yet because I'm very confused about what is needed, besides the basic kernel and iproute2, for a multicast-capable Linux router. Thanks. ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] Network Routing
oh... and of course: echo 1 > /proc/sys/net/ipv4/ip_forward On 12/7/05, Edmundo Carmona <[EMAIL PROTECTED]> wrote: > I wouldn't make it more difficult with separate routing tables. Just > set the firewall to allow traffic between the interfaces you want, > drop the rest and that's it. I mean: > > iptables -A FORWARD -i eth0 -o eth2 -j ACCEPT > iptables -A FORWARD -i eth2 -o eth0 -j ACCEPT > iptables -A FORWARD -i eth1 -o eth3 -j ACCEPT > iptables -A FORWARD -i eth3 -o eth1 -j ACCEPT > > # default policy > iptables -P FORWARD DROP > > That should make it only of this router is their default gw or at > least the router to the other network the hosts want to reach. > > On 12/7/05, Paul Lewis <[EMAIL PROTECTED]> wrote: > > Hi, > > > > The output from route -n is shown below: > > > > 192.168.100.0 0.0.0.0 255.255.255.0 U 0 00 eth0 > > 192.168.20.00.0.0.0 255.255.255.0 U 0 00 eth3 > > 192.168.14.00.0.0.0 255.255.254.0 U 0 00 eth4 > > 192.168.4.0 0.0.0.0 255.255.252.0 U 0 00 eth2 > > 192.168.0.0 0.0.0.0 255.255.252.0 U 0 00 eth1 > > 169.254.0.0 0.0.0.0 255.255.0.0 U 0 00 eth4 > > 0.0.0.0 192.168.100.254 0.0.0.0 UG0 00 eth0 > > > > And here is the output from ifconfig (edited down to save space): > > > > eth0 Link encap:Ethernet HWaddr 00:14:22:09:FB:1A > > inet addr:192.168.100.253 Bcast:192.168.100.255 > > Mask:255.255.255.0 > > inet6 addr: fe80::214:22ff:fe09:fb1a/64 Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > > > eth1 Link encap:Ethernet HWaddr 00:04:23:BB:89:9C > > inet addr:192.168.3.253 Bcast:192.168.3.255 Mask:255.255.252.0 > > inet6 addr: fe80::204:23ff:febb:899c/64 Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > > > eth2 Link encap:Ethernet HWaddr 00:04:23:BB:89:9D > > inet addr:192.168.7.253 Bcast:192.168.7.255 Mask:255.255.252.0 > > inet6 addr: fe80::204:23ff:febb:899d/64 Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > > > eth3 Link encap:Ethernet HWaddr 00:14:22:09:FB:1B > > inet addr:192.168.20.253 Bcast:192.168.20.255 Mask:255.255.255.0 > > inet6 addr: fe80::214:22ff:fe09:fb1b/64 Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > > > loLink encap:Local Loopback > > inet addr:127.0.0.1 Mask:255.0.0.0 > > inet6 addr: ::1/128 Scope:Host > > UP LOOPBACK RUNNING MTU:16436 Metric:1 > > > > Cheers, > > > > Paul > > > > --- > > Paul Lewis ([EMAIL PROTECTED]) > > Part II Student > > Materials Science > > University of Oxford > > > > > > > > -Original Message- > > From: Edmundo Carmona [mailto:[EMAIL PROTECTED] > > Sent: 07 December 2005 16:00 > > To: Paul Lewis > > Subject: Re: [LARTC] Network Routing > > > > to start with: what is the output of route -n or ip route show default > > > > On 12/7/05, Paul Lewis <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > > > I have a linux router with 4 ethernet cards; eth0 through eth3. Basically, > > > all I want to do is route all traffic from eth2 to eth0, and all traffic > > > from eth1 to eth3. > > > > > > I've looked through the LARTC how-to, specifically at chapter 4, about > > > multiple providers. However, I am still a bit confused, and not sure how > > to > > > set up my routing tables, as my scenario differs from the one in the > > > example. > > > > > > Any help would be appreciated. > > > > > > Many thanks, > > > > > > Paul > > > > > > --- > > > Paul Lewis ([EMAIL PROTECTED]) > > > Part II Student > > > Materials Science > > > University of Oxford > > > > > > > > > > > > > > > ___ > > > LARTC mailing list > > > LARTC@mailman.ds9a.nl > > > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > > > > > > > > > > ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] Network Routing
I wouldn't make it more difficult with separate routing tables. Just set the firewall to allow traffic between the interfaces you want, drop the rest and that's it. I mean: iptables -A FORWARD -i eth0 -o eth2 -j ACCEPT iptables -A FORWARD -i eth2 -o eth0 -j ACCEPT iptables -A FORWARD -i eth1 -o eth3 -j ACCEPT iptables -A FORWARD -i eth3 -o eth1 -j ACCEPT # default policy iptables -P FORWARD DROP That should make it only of this router is their default gw or at least the router to the other network the hosts want to reach. On 12/7/05, Paul Lewis <[EMAIL PROTECTED]> wrote: > Hi, > > The output from route -n is shown below: > > 192.168.100.0 0.0.0.0 255.255.255.0 U 0 00 eth0 > 192.168.20.00.0.0.0 255.255.255.0 U 0 00 eth3 > 192.168.14.00.0.0.0 255.255.254.0 U 0 00 eth4 > 192.168.4.0 0.0.0.0 255.255.252.0 U 0 00 eth2 > 192.168.0.0 0.0.0.0 255.255.252.0 U 0 00 eth1 > 169.254.0.0 0.0.0.0 255.255.0.0 U 0 00 eth4 > 0.0.0.0 192.168.100.254 0.0.0.0 UG0 00 eth0 > > And here is the output from ifconfig (edited down to save space): > > eth0 Link encap:Ethernet HWaddr 00:14:22:09:FB:1A > inet addr:192.168.100.253 Bcast:192.168.100.255 > Mask:255.255.255.0 > inet6 addr: fe80::214:22ff:fe09:fb1a/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > eth1 Link encap:Ethernet HWaddr 00:04:23:BB:89:9C > inet addr:192.168.3.253 Bcast:192.168.3.255 Mask:255.255.252.0 > inet6 addr: fe80::204:23ff:febb:899c/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > eth2 Link encap:Ethernet HWaddr 00:04:23:BB:89:9D > inet addr:192.168.7.253 Bcast:192.168.7.255 Mask:255.255.252.0 > inet6 addr: fe80::204:23ff:febb:899d/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > eth3 Link encap:Ethernet HWaddr 00:14:22:09:FB:1B > inet addr:192.168.20.253 Bcast:192.168.20.255 Mask:255.255.255.0 > inet6 addr: fe80::214:22ff:fe09:fb1b/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > loLink encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > > Cheers, > > Paul > > --- > Paul Lewis ([EMAIL PROTECTED]) > Part II Student > Materials Science > University of Oxford > > > > -Original Message- > From: Edmundo Carmona [mailto:[EMAIL PROTECTED] > Sent: 07 December 2005 16:00 > To: Paul Lewis > Subject: Re: [LARTC] Network Routing > > to start with: what is the output of route -n or ip route show default > > On 12/7/05, Paul Lewis <[EMAIL PROTECTED]> wrote: > > Hi, > > > > I have a linux router with 4 ethernet cards; eth0 through eth3. Basically, > > all I want to do is route all traffic from eth2 to eth0, and all traffic > > from eth1 to eth3. > > > > I've looked through the LARTC how-to, specifically at chapter 4, about > > multiple providers. However, I am still a bit confused, and not sure how > to > > set up my routing tables, as my scenario differs from the one in the > > example. > > > > Any help would be appreciated. > > > > Many thanks, > > > > Paul > > > > --- > > Paul Lewis ([EMAIL PROTECTED]) > > Part II Student > > Materials Science > > University of Oxford > > > > > > > > > > ___ > > LARTC mailing list > > LARTC@mailman.ds9a.nl > > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > > > > > ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] Network Routing
On Wed, 7 Dec 2005 15:47:00 - "Paul Lewis" <[EMAIL PROTECTED]> wrote: >Hi, hi >I have a linux router with 4 ethernet cards; eth0 through eth3. Basically, >all I want to do is route all traffic from eth2 to eth0, and all traffic >from eth1 to eth3. This is easy, just set up 2 new routing tables and add rules to assign the packets to the correct one. Let's say you have eth0: 1.2.0.2/30 (gateway 10.2.0.1) eth1: 192.168.0.1/24 eth2: 192.168.1.1/24 eth3: 1.3.0.2/30 (gateway 10.3.0.1) Then you do something like: ip rule add from 192.168.0.0/24 table 101 ip rule add from 192.168.1.0/24 table 102 ip route add 192.168.0.0/24 dev eth1 table 101 ip route add 192.168.1.0/24 dev eth2 table 101 ip route add 127.0.0.1/8 dev lo table 101 ip route add default via 10.3.0.1 dev eth3 table 101 ip route add 192.168.0.0/24 dev eth1 table 102 ip route add 192.168.1.0/24 dev eth2 table 102 ip route add 127.0.0.1/8 dev lo table 102 ip route add default via 10.2.0.1 dev eth0 table 102 (it's likely I forgot some detail or have a typo there, it's just an example) >Paul Yours sincerely, Peter -- http://www.shurdix.org - Linux distribution for routers and firewalls ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] Network Routing
Hi, I have a linux router with 4 ethernet cards; eth0 through eth3. Basically, all I want to do is route all traffic from eth2 to eth0, and all traffic from eth1 to eth3. I've looked through the LARTC how-to, specifically at chapter 4, about multiple providers. However, I am still a bit confused, and not sure how to set up my routing tables, as my scenario differs from the one in the example. Any help would be appreciated. Many thanks, Paul --- Paul Lewis ([EMAIL PROTECTED]) Part II Student Materials Science University of Oxford ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] LARTC wiki site?
On Wed, 07 Dec 2005 16:38:11 +0100 Sophana Kok <[EMAIL PROTECTED]> wrote: > Hi > > What about a wiki site on the lartc.org website? > Or a faq manager? > There are a lot of applications that should be out of the lartc document > and that can be in a wiki. > Or add to existing wiki at http://linux-net.osdl.org ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] LARTC wiki site?
Hi What about a wiki site on the lartc.org website? Or a faq manager? There are a lot of applications that should be out of the lartc document and that can be in a wiki. ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] shaping small rates
What do you call few seconds delay? What is your link speed, and rates? Damian Jakubowski wrote: What traffic shaper must I use to shape small rates (~1kBps) without significant latency? I have experience with htb and i now that htb is not very good solution in this case. With so low rates it generates a few seconds delays beetwen sended packets. Such situation is described on htb homepage, but without solution. Any ideas ? JQu ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] inspecting what's going in a class
"Ethy H. Brito" wrote: > > On Mon, 5 Dec 2005 13:04:17 -0200 > "Ethy H. Brito" <[EMAIL PROTECTED]> wrote: > > > > > http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz > > > > Question to All: I see that the patch applies against iproute2-2.6.11. Does > > the > > "2.6.11" part have anything to do with kernel version??? I.e. > > iproute2-2.6.11 > > has to be used with 2.6 kernel series? > > Come on people! It is not so hard to write the answer, is it? > > Regards > > -- > > Ethy H. Brito /"\ This has been answered before. Is your Google broken? The version of iproute2 has nothing at all to do with the kernel version. MY OPINION: It is unfortunate that Linux kernel 2.6.11 was not 2.5.something as all 2.6 kernels up to .13 were junk and therefore did not belong in the stable branch. It is an even more unfortunate thing that there are no longer development and stable kernel versions. -- gypsy ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Re: [LARTC] inspecting what's going in a class
On Mon, 5 Dec 2005 13:04:17 -0200 "Ethy H. Brito" <[EMAIL PROTECTED]> wrote: > > > http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz > > Question to All: I see that the patch applies against iproute2-2.6.11. Does > the > "2.6.11" part have anything to do with kernel version??? I.e. iproute2-2.6.11 > has to be used with 2.6 kernel series? Come on people! It is not so hard to write the answer, is it? Regards -- Ethy H. Brito /"\ InterNexo Ltda. \ / CAMPANHA DA FITA ASCII - CONTRA MAIL HTML +55 (12) 3941-6860 X ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL S.J.Campos - Brasil / \ ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc