Registrován: 26.04.2003
Příspěvků: 19

Ahoj, mam drobny problem s tim, aby me shaping zalozeny na htb jel obema smery. Nasledujici dva scripty mi nejak nechteji jit zaroven a nevim proc. Podle mne neni duvod. Samostatne to bezi jedna basen ale shapovat jeden smer nema smysl. Mimochodem, je nutne, aby se root tridy na ruznych interfacech jmenovaly ruzne, nebo se mohou jmenovat stejne? Dale je nutne markovat (script je trosku slozitejsi nez je zde a markovani je nutne) rezetce FORVARD a OUTPUT, nebo staci jen Forward? Na stroji se zadny zavratny trafic negeneruje, jen obcas ssh.

RATE=480
U=30
A=120
B=180
C=120
D=60

tc qdisc del dev eth0 root > /dev/null
tc qdisc add dev eth0 root handle 1:0 htb

tc class add dev eth0 parent 1:0 classid 1:1 htb rate ${RATE}kbit

tc class add dev eth0 parent 1:1 classid 1:11 htb rate ${A}kbit ceil ${A}kbit
tc class add dev eth0 parent 1:1 classid 1:12 htb rate ${B}kbit ceil ${B}kbit
tc class add dev eth0 parent 1:1 classid 1:13 htb rate ${C}kbit ceil ${C}kbit
tc class add dev eth0 parent 1:1 classid 1:14 htb rate ${D}kbit ceil ${D}kbit

tc class add dev eth0 parent 1:11 classid 1:101 htb rate ${U}kbit ceil ${A}kbit
tc class add dev eth0 parent 1:11 classid 1:102 htb rate ${U}kbit ceil ${A}kbit
tc class add dev eth0 parent 1:11 classid 1:103 htb rate ${U}kbit ceil ${A}kbit
tc class add dev eth0 parent 1:11 classid 1:104 htb rate ${U}kbit ceil ${A}kbit
...

tc qdisc add dev eth1 parent 2:101 handle 101:0 sfq perturb 1
tc qdisc add dev eth1 parent 2:102 handle 102:0 sfq perturb 1
tc qdisc add dev eth1 parent 2:103 handle 103:0 sfq perturb 1
tc qdisc add dev eth1 parent 2:104 handle 104:0 sfq perturb 1
...

iptables -t mangle -F FORWARD
iptables -t mangle -A FORWARD -j MARK --set-mark 30
iptables -t mangle -A FORWARD -s 62.209.236.62 -j MARK --set-mark 1
iptables -t mangle -A FORWARD -s 62.209.236.35 -j MARK --set-mark 2
iptables -t mangle -A FORWARD -s 62.209.236.36 -j MARK --set-mark 3
iptables -t mangle -A FORWARD -s 62.209.236.37 -j MARK --set-mark 4
...

iptables -t mangle -F OUTPUT
iptables -t mangle -A OUTPUT -j MARK --set-mark 30
iptables -t mangle -A OUTPUT -s 62.209.236.62 -j MARK --set-mark 1
iptables -t mangle -A OUTPUT -s 62.209.236.35 -j MARK --set-mark 2
iptables -t mangle -A OUTPUT -s 62.209.236.36 -j MARK --set-mark 3
iptables -t mangle -A OUTPUT -s 62.209.236.37 -j MARK --set-mark 4
...

tc filter add dev eth1 parent 2:0 protocol ip handle 1 fw flowid 2:101
tc filter add dev eth1 parent 2:0 protocol ip handle 2 fw flowid 2:102
tc filter add dev eth1 parent 2:0 protocol ip handle 3 fw flowid 2:103
tc filter add dev eth1 parent 2:0 protocol ip handle 4 fw flowid 2:104
...
a druhy:

RATE=480
U=18
A=264
B=108
C=72
D=36

tc qdisc del dev eth1 root > /dev/null
tc qdisc add dev eth1 root handle 2:0 htb

tc class add dev eth1 parent 2:0 classid 2:1 htb rate ${RATE}kbit

tc class add dev eth1 parent 2:1 classid 2:11 htb rate ${A}kbit ceil ${A}kbit
tc class add dev eth1 parent 2:1 classid 2:12 htb rate ${B}kbit ceil ${B}kbit
tc class add dev eth1 parent 2:1 classid 2:13 htb rate ${C}kbit ceil ${C}kbit
tc class add dev eth1 parent 2:1 classid 2:14 htb rate ${D}kbit ceil ${D}kbit

tc class add dev eth1 parent 2:11 classid 2:101 htb rate 66kbit ceil ${A}kbit
tc class add dev eth1 parent 2:11 classid 2:102 htb rate 66kbit ceil ${A}kbit
tc class add dev eth1 parent 2:11 classid 2:103 htb rate 66kbit ceil ${A}kbit
tc class add dev eth1 parent 2:11 classid 2:104 htb rate 66kbit ceil ${A}kbit
...

Dekuji za kazdou radu.

Ondraxx

Naposledy upravil ondraxx 26.05.2004 v 18:11