\n
<\/p>\n","protected":false},"excerpt":{"rendered":"The case is like this:
\n[code]
\nInternet < --> [dsl modem] < --> [linux box] < --> [Lan]
\n[\/code]<\/p>\n
DSL modem is connected on eth2 on linux box and the rest of the Lan on eth0. I had a serious problem with people leaving edonkey clients opens all night..limiting the download speed to 20kb\/sec but forgetting to limit the upload. The current dsl line is 384\/128 so having the uploads unlimited…is like killing the line.<\/p>\n
The solution was to setup a QOS script. And here it is:
\n[code]
\n#!\/bin\/bash<\/p>\n
DEV=”eth2″
\nLOCALIF=”eth2″<\/p>\n
# Reset everything to a known state (cleared)
\ntc qdisc del dev $DEV root 2> \/dev\/null > \/dev\/null
\ntc qdisc del dev imq0 root 2> \/dev\/null > \/dev\/null
\niptables -t mangle -F POSTROUTING 2> \/dev\/null > \/dev\/null
\niptables -t mangle -Z POSTROUTING 2> \/dev\/null > \/dev\/null
\niptables -t mangle -X POSTROUTING 2> \/dev\/null > \/dev\/null
\niptables -t mangle -F tosfix
\niptables -t mangle -F ack
\nip link set imq0 down 2> \/dev\/null > \/dev\/null
\nrmmod imq 2> \/dev\/null > \/dev\/null<\/p>\n
if [ “$1” = “stop” ]
\nthen
\n echo “Shaping removed on $DEV.”
\n exit
\nfi<\/p>\n
tc qdisc add dev $DEV root handle 1: tbf rate 85kbit burst 1600 limit 1
\ntc qdisc add dev $DEV parent 1:1 handle 2: prio bands 4
\ntc qdisc add dev $DEV parent 2:1 handle 10: sfq perturb 10
\ntc qdisc add dev $DEV parent 2:2 handle 20: sfq perturb 10
\ntc qdisc add dev $DEV parent 2:3 handle 30: sfq perturb 10
\ntc qdisc add dev $DEV parent 2:4 handle 40: tbf rate 40kbit burst 1600 limit 3000
\ntc qdisc add dev $DEV parent 40:1 handle 41: pfifo limit 10<\/p>\n
iptables -t mangle -N tosfix
\niptables -t mangle -A tosfix -p tcp -m length –length 0:64 -j RETURN
\niptables -t mangle -A tosfix -m limit –limit 2\/s –limit-burst 10 -j RETURN
\niptables -t mangle -A tosfix -j TOS –set-tos Maximize-Throughput
\niptables -t mangle -A tosfix -j RETURN<\/p>\n
iptables -t mangle -N ack
\niptables -t mangle -A ack -m tos ! –tos Normal-Service -j RETURN
\niptables -t mangle -A ack -p tcp -m length –length 0:64 \\
\n -j TOS –set-tos Minimize-Delay
\niptables -t mangle -A ack -p tcp -m length –length 64: \\
\n -j TOS –set-tos Maximize-Throughput
\niptables -t mangle -A ack -j RETURN<\/p>\n
# Is our TOS broken? Fix it for TCP ACK and OpenSSH.<\/p>\n
iptables -t mangle -A POSTROUTING -p tcp -m tcp –tcp-flags SYN,RST,ACK ACK -j ack
\niptables -t mangle -A POSTROUTING -p tcp -m tos –tos Minimize-Delay -j tosfix<\/p>\n
# Here we deal with ACK, SYN, and RST packets<\/p>\n
# Match SYN and RST packets
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp -m tcp –tcp-flags ! SYN,RST,ACK ACK \\
\n -j CLASSIFY –set-class 2:1
\n# Match ACK packets
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp -m tcp –tcp-flags SYN,RST,ACK ACK \\
\n -m length –length :128 -m tos –tos Minimize-Delay \\
\n -j CLASSIFY –set-class 2:1<\/p>\n
# Match packets with TOS Minimize-Delay
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp -m tos –tos Minimize-Delay \\
\n -j CLASSIFY –set-class 2:1<\/p>\n
### Actual traffic shaping classifications with CLASSIFY<\/p>\n
# ICMP (ping)<\/p>\n
iptables -t mangle -A POSTROUTING -o $LOCALIF -p icmp -j CLASSIFY –set-class 2:1<\/p>\n
# Outbound client requests for HTTP, IRC and AIM (dport matches)<\/p>\n
iptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp –dport 80 -j CLASSIFY –set-class 2:2
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp –dport 6667 -j CLASSIFY –set-class 2:2
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp –dport 5190 -j CLASSIFY –set-class 2:2
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp –sport 80 -j CLASSIFY –set-class 2:3
\niptables -t mangle -A POSTROUTING -o $LOCALIF -p tcp –dport 1024: -j CLASSIFY –set-class 2:4
\n[\/code]<\/p>\n
It WORKS for me…I don’t know whether it will work for you though. I take no responsibility. I will explain it no further because comments do exists and it’s really easy to understand what’s going on if you read a couple of tc tutorials from the net. Many ideas about this script were “stolen” from other scripts I studied while trying to make mine. <\/p>\n
Have fun with it…<\/p>\n
Here’s an mrtg graph to see how it’s working. Watch the blue line which is the uploads. It never goes beyond a reasonable limit and download stays unaffected:
\n<\/p>\n","protected":false},"excerpt":{"rendered":"
The case is like this: [code] Internet < --> [dsl modem] < --> [linux box] < --> [Lan] [\/code] DSL modem is connected on eth2 on linux box and the rest of the Lan on eth0. I had a serious problem with people leaving edonkey clients opens all night..limiting the download speed to 20kb\/sec but […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"footnotes":""},"categories":[1,5,3],"tags":[],"class_list":["post-140","post","type-post","status-publish","format-standard","hentry","category-general","category-internet","category-linux"],"aioseo_notices":[],"views":10892,"_links":{"self":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":0,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/140\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/media?parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/categories?post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/tags?post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}