Re: [LARTC] Sequence and Default port
On Tuesday 23 September 2003 07:56, Raghuveer wrote: > Here are the rules Iam applying to control outgoing traffic at WAN(eth0) > interface for public hosted services. > Here actual Isp rate = 512Kbit, rate taken = 97% of 512Kbit, eth0 ip is > 192.168.1.2 > > tc qdisc add dev eth0 root handle 1: cbq bandwidth 100Mbit avpkt 1000 cell > 8 tc class add dev eth0 parent 1:0 classid 1:1 cbq bandwidth 100Mbit rate > 497Kbit weight 49Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 > bounded > /* Hosted http server bandwidth = 64Kbit */ > tc class add dev eth0 parent 1:1 classid 1:2 cbq bandwidth 100Mbit rate > 64Kbit weight 6Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 > tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src > 192.168.1.2 match ip sport 80 0x classid 1:2 > > /* Hosted ftp server bandwidth = 64Kbit */ > tc class add dev eth0 parent 1:1 classid 1:3 cbq bandwidth 100Mbit rate > 64Kbit weight 6Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 > tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src > 192.168.1.2 match ip sport 21 0x classid 1:3 > > /* Default : Rest/Other traffic */ > tc class add dev eth0 parent 1:1 classid 1:4 cbq bandwidth 100Mbit rate > 369Kbit weight 40Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 > /* Here I want replace the below rule with a simple rule based only on > port i.e by using some default port other than 80, 21 as sport, which > according to your last mail is not possible, hence pls check whether the > below rule will do for remaining traffic */ > tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src > 0/0 match ip dst 0/0 classid 1:4 > > Pls let me know whether the above rules are framed correctly or can be > done in a better way. I can't do it better then you did :) Stef -- [EMAIL PROTECTED] "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Sequence and Default port
Hi Stef, Stef Coene wrote: On Monday 22 September 2003 13:25, Raghuveer wrote: Hi All, I have following queries :-- 1. For indicating any default IP we are placing 0/0 as src or dst in the tc script, similarly what can I use for default port?. This is the scenario when rules are framed based on ports. For example, For a firewall with eth0(WAN), eth1(LAN) and eth2(DMZ), Iam doing CBQ outgoing (egress) traffic shaping at eth0 interface for public hosted servers located at eth2(DMZ) based on ports(80 for http etc). Now I want to frame a rule for remaining traffic (default) allocating remaining bandwidth(total rate is 512Kbits, 256 Kbits provided to the hosted servers, rest 256KBits is for other traffic). My rules for identifying the hosted servers is based entirely on src port. Hence what rule should I frame for all other traffic coming from eth1(LAN). There is no such thing as default port. But I don't understand why you need this. I think it can be done with the dst/src parameter. Here are the rules Iam applying to control outgoing traffic at WAN(eth0) interface for public hosted services. Here actual Isp rate = 512Kbit, rate taken = 97% of 512Kbit, eth0 ip is 192.168.1.2 tc qdisc add dev eth0 root handle 1: cbq bandwidth 100Mbit avpkt 1000 cell 8 tc class add dev eth0 parent 1:0 classid 1:1 cbq bandwidth 100Mbit rate 497Kbit weight 49Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 bounded /* Hosted http server bandwidth = 64Kbit */ tc class add dev eth0 parent 1:1 classid 1:2 cbq bandwidth 100Mbit rate 64Kbit weight 6Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src 192.168.1.2 match ip sport 80 0x classid 1:2 /* Hosted ftp server bandwidth = 64Kbit */ tc class add dev eth0 parent 1:1 classid 1:3 cbq bandwidth 100Mbit rate 64Kbit weight 6Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src 192.168.1.2 match ip sport 21 0x classid 1:3 /* Default : Rest/Other traffic */ tc class add dev eth0 parent 1:1 classid 1:4 cbq bandwidth 100Mbit rate 369Kbit weight 40Kbit prio 3 allot 1514 cell 8 maxburst 10 avpkt 1000 /* Here I want replace the below rule with a simple rule based only on port i.e by using some default port other than 80, 21 as sport, which according to your last mail is not possible, hence pls check whether the below rule will do for remaining traffic */ tc filter add dev eth0 parent 1:1 protocol ip prio 3 u32 match ip src 0/0 match ip dst 0/0 classid 1:4 Pls let me know whether the above rules are framed correctly or can be done in a better way. 2. Is the rule sequence play any role, like if there is any conflict between the rules then the last rule will be given preference. what happens exactly if there is any conflict...? The first rule that's a match wil be followed. Order is based on prio and the order they are entered. Thanks for this confirmation. Regards -Raghu Stef ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Sequence and Default port
On Monday 22 September 2003 13:25, Raghuveer wrote: > Hi All, > > I have following queries :-- > > 1. For indicating any default IP we are placing 0/0 as src or dst in the > tc script, similarly what can I use for default port?. This is the > scenario when rules are framed based on ports. For example, For a > firewall with eth0(WAN), eth1(LAN) and eth2(DMZ), Iam doing CBQ outgoing > (egress) traffic shaping at eth0 interface for public hosted servers > located at eth2(DMZ) based on ports(80 for http etc). Now I want to > frame a rule for remaining traffic (default) allocating remaining > bandwidth(total rate is 512Kbits, 256 Kbits provided to the hosted > servers, rest 256KBits is for other traffic). My rules for identifying > the hosted servers is based entirely on src port. Hence what rule should > I frame for all other traffic coming from eth1(LAN). There is no such thing as default port. But I don't understand why you need this. I think it can be done with the dst/src parameter. > 2. Is the rule sequence play any role, like if there is any conflict > between the rules then the last rule will be given preference. what > happens exactly if there is any conflict...? The first rule that's a match wil be followed. Order is based on prio and the order they are entered. Stef -- [EMAIL PROTECTED] "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Sequence and Default port
Hi All, I have following queries :-- 1. For indicating any default IP we are placing 0/0 as src or dst in the tc script, similarly what can I use for default port?. This is the scenario when rules are framed based on ports. For example, For a firewall with eth0(WAN), eth1(LAN) and eth2(DMZ), Iam doing CBQ outgoing (egress) traffic shaping at eth0 interface for public hosted servers located at eth2(DMZ) based on ports(80 for http etc). Now I want to frame a rule for remaining traffic (default) allocating remaining bandwidth(total rate is 512Kbits, 256 Kbits provided to the hosted servers, rest 256KBits is for other traffic). My rules for identifying the hosted servers is based entirely on src port. Hence what rule should I frame for all other traffic coming from eth1(LAN). 2. Is the rule sequence play any role, like if there is any conflict between the rules then the last rule will be given preference. what happens exactly if there is any conflict...? Any suggestions and reply is very much helpful. Regards -Raghu ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
