On Fri, 2004-05-07 at 01:45, Ow Mun Heng wrote:
> > Cisco??!? I'm a little ISP and can hardly afford to
> > spell Cisco, let
> > alone buy them.. I've got an old P166 handling it all for me... Moves
> > the packets nicely, though I'm going to upgrade it soon, as I
> > need some
> > of the newer QOS that tc provides....
>
>
> oh.. can you tell a bit more on how you set up the QoS in the sense that
> which client gets what sort of allowed bandwidth?
>
> Cause, I've mentioned already that from what I read, I can only successfully
> control the upload and not the download.
>
> Say my pipe is 1.5Mbit and I want to separate that into 256kbps/384kbps and
> 512kbps
> on different clients. How would you write the tc rules??
What I ended up doing was using FMARK on the packets to sort by
origination/destination. I then have tc look for the FMARK to determine
how to handle it. Find attached the tc rules I run on my 4 interface
firewall at home.
--
Homer Parker /"\ ASCII Ribbon Campaign
BOFH for homershut.net \ / No HTML/RTF in email
http://www.homershut.net x No Word docs in email
telnet://bbs.homershut.net / \ Respect for open standards
"Bill Gates reports on security progress made and the challenges ahead."
-- Microsoft's Homepage, on the day an SQL Server bug crippled large
sections of the Internet.
tc qdisc add dev eth0 root handle 1: htb default 255
tc class add dev eth0 parent 1: classid 1:1 htb rate 10mbit
# Default class
tc class add dev eth0 parent 1:1 classid 1:255 htb rate 64kbit ceil 128kbit
# Default gets Stochastic Fairness
tc qdisc add dev eth0 parent 1:255 sfq perturb 10
# Root class for test ip
tc class add dev eth0 parent 1:1 classid 1:10 htb rate 9Mbit ceil 10Mbit
# Secondary classes
tc class add dev eth0 parent 1:10 classid 1:11 htb rate 256kbit ceil 4Mbit prio 2
tc class add dev eth0 parent 1:10 classid 1:12 htb rate 256kbit ceil 512kbit prio 3
tc class add dev eth0 parent 1:20 classid 1:23 htb rate 60kbit ceil 64kbit prio 4
tc class add dev eth0 parent 1:30 classid 1:33 htb rate 60kbit ceil 64kbit prio 4
# Stochastic Fairness:
tc qdisc add dev eth0 parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev eth0 parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev eth0 parent 1:23 handle 23: sfq perturb 10
tc qdisc add dev eth0 parent 1:33 handle 33: sfq perturb 10
# High priority for interactive
tc filter add dev eth0 parent 1: protocol ip prio 1 u32 match ip tos 0x10 0xff classid 1:11
# Next is ICMP
tc filter add dev eth0 parent 1: protocol ip prio 2 u32 match ip protocol 1 0xff flowid 1:11
# Put ACK packets in the interactive class:
tc filter add dev eth0 parent 1: protocol ip prio 3 u32 \
match ip protocol 6 0xff \
match u8 0x05 0x0f at 0 \
match u16 0x0000 0xffc0 at 2 \
match u8 0x10 0xff at 33 \
flowid 1:11
# Filter on fw-marks
tc filter add dev eth0 parent 1: protocol ip prio 4 handle 11 fw classid 1:11
tc filter add dev eth0 parent 1: protocol ip prio 5 handle 14 fw classid 1:12
tc filter add dev eth0 parent 1: protocol ip prio 6 handle 23 fw classid 1:23
tc filter add dev eth0 parent 1: protocol ip prio 7 handle 33 fw classid 1:33
# filter on ip for phone
tc filter add dev eth0 parent 1: protocol ip prio 1 u32 match ip dst 192.168.1.102 flowid 1:11
# Eth1 setup
tc qdisc add dev eth1 root handle 10: htb default 12
tc class add dev eth1 parent 10: classid 10:1 htb rate 95Mbit ceil 99Mbit
# Secondary classes -- Internet
tc class add dev eth1 parent 10:1 classid 10:11 htb rate 5Mbit ceil 6Mbit prio 1
tc class add dev eth1 parent 10:1 classid 10:12 htb rate 512kbit ceil 768kbit prio 2
tc class add dev eth1 parent 10:1 classid 10:13 htb rate 80Mbit ceil 85Mbit prio 2
tc class add dev eth1 parent 10:1 classid 10:14 htb rate 5Mbit ceil 7Mbit prio 2
# echo secondary 1
# Stochastic Fairness:
tc qdisc add dev eth1 parent 10:11 handle 11: sfq perturb 10
tc qdisc add dev eth1 parent 10:12 handle 12: sfq perturb 10
tc qdisc add dev eth1 parent 10:13 handle 13: sfq perturb 10
tc qdisc add dev eth1 parent 10:14 handle 14: sfq perturb 10
# echo sf 1
tc filter add dev eth1 parent 10: protocol ip prio 3 handle 1 fw classid 10:11
tc filter add dev eth1 parent 10: protocol ip prio 5 handle 21 fw classid 10:13
tc filter add dev eth1 parent 10: protocol ip prio 6 handle 31 fw classid 10:14
# TOS Minimum Delay (ssh, NOT scp)
tc filter add dev eth1 parent 10: protocol ip prio 1 u32 match ip tos 0x10 0xff flowid 10:11
# ICMP (ip protocol 1) in the interactive class 1:10 so we
# can do measurements & impress our friends:
tc filter add dev eth1 parent 10: protocol ip prio 2 u32 match ip protocol 1 0xff flowid 10:11
# To speed up downloads while an upload is going on, put ACK packets in
# the interactive class:
tc filter add dev eth1 parent 10: protocol ip prio 4 u32 \
match ip protocol 6 0xff \
match u8 0x05 0x0f at 0 \
match u16 0x0000 0xffc0 at 2 \
match u8 0x10 0xff at 33 \
flowid 10:11
#filter on ip for phone
tc filter add dev eth1 parent 10: protocol ip prio 1 u32 match ip src 192.168.1.102 flowid 1:11
# Eth2 setup
tc qdisc add dev eth2 root handle 20: htb default 12
tc class add dev eth2 parent 20: classid 20:1 htb rate 95Mbit ceil 99Mbit
# Secondary classes
tc class add dev eth2 parent 20:1 classid 20:11 htb rate 60kbit ceil 64kbit prio 1
tc class add dev eth2 parent 20:1 classid 20:12 htb rate 60kbit ceil 64kbit prio 2
tc class add dev eth2 parent 20:1 classid 20:13 htb rate 80Mbit ceil 85Mbit prio 2
tc class add dev eth2 parent 20:1 classid 20:14 htb rate 4Mbit ceil 5Mbit prio 2
# Stochastic Fairness:
tc qdisc add dev eth2 parent 20:11 handle 11: sfq perturb 10
tc qdisc add dev eth2 parent 20:12 handle 12: sfq perturb 10
tc qdisc add dev eth2 parent 20:13 handle 13: sfq perturb 10
tc qdisc add dev eth2 parent 20:14 handle 14: sfq perturb 10
tc filter add dev eth2 parent 20: protocol ip prio 3 handle 2 fw classid 20:13
tc filter add dev eth2 parent 20: protocol ip prio 3 handle 12 fw classid 20:13
tc filter add dev eth2 parent 20: protocol ip prio 4 handle 32 fw classid 20:14
# TOS Minimum Delay (ssh, NOT scp)
tc filter add dev eth2 parent 20: protocol ip prio 1 u32 match ip tos 0x10 0xff flowid 20:11
# ICMP (ip protocol 1) in the interactive class 1:10 so we
# can do measurements & impress our friends:
tc filter add dev eth2 parent 20: protocol ip prio 2 u32 match ip protocol 1 0xff flowid 20:11
# To speed up downloads while an upload is going on, put ACK packets in
# the interactive class:
tc filter add dev eth2 parent 20: protocol ip prio 5 u32 \
match ip protocol 6 0xff \
match u8 0x05 0x0f at 0 \
match u16 0x0000 0xffc0 at 2 \
match u8 0x10 0xff at 33 \
flowid 20:11
# Eth3 setup
tc qdisc add dev eth3 root handle 30: htb default 12
tc class add dev eth3 parent 30: classid 30:1 htb rate 9Mbit ceil 10Mbit
# Secondary classes
tc class add dev eth3 parent 30:1 classid 30:13 htb rate 4Mbit ceil 5Mbit prio 1
tc class add dev eth3 parent 30:1 classid 30:11 htb rate 64kbit ceil 128kbit prio 2
tc class add dev eth3 parent 30:1 classid 30:12 htb rate 64kbit ceil 128kbit prio 2
# Stochastic Fairness:
tc qdisc add dev eth3 parent 30:11 handle 11: sfq perturb 10
tc qdisc add dev eth3 parent 30:12 handle 12: sfq perturb 10
tc qdisc add dev eth3 parent 30:13 handle 13: sfq perturb 10
tc filter add dev eth3 parent 30: protocol ip prio 3 handle 13 fw classid 30:13
tc filter add dev eth3 parent 30: protocol ip prio 4 handle 22 fw classid 30:13
# TOS Minimum Delay (ssh, NOT scp)
tc filter add dev eth3 parent 30: protocol ip prio 1 u32 match ip tos 0x10 0xff flowid 30:11
# ICMP (ip protocol 1) in the interactive class 1:10 so we
# can do measurements & impress our friends:
tc filter add dev eth3 parent 30: protocol ip prio 2 u32 match ip protocol 1 0xff flowid 30:11
# To speed up downloads while an upload is going on, put ACK packets in
# the interactive class:
tc filter add dev eth3 parent 30: protocol ip prio 5 u32 \
match ip protocol 6 0xff \
match u8 0x05 0x0f at 0 \
match u16 0x0000 0xffc0 at 2 \
match u8 0x10 0xff at 33 \
flowid 30:11
