|
From: Frank W. <Fra...@ct...> - 2012-04-24 13:31:42
|
Hi all, I need to find a way to prioritize traffic (based on source IP) on one of my low-bandwidth sites. I remember looking into this a long time ago and coming up without any clue... Is there a way to do this with DL and, if so can anyone point me in the right direction please? Thanks a lot Frank -- _______________________________________________ Centre de Technologie de l'Education 29 avenue John F. Kennedy L-1855 Luxembourg-Kirchberg email: Fra...@ct... tél.: +352 247-85973 fax: +352 333797 _______________________________________________ |
|
From: Heiko Z. <he...@zu...> - 2012-04-24 13:48:56
Attachments:
firewall.rules
|
Frank, I attached the traffic shaping parts of my firewall script. I don't remember where I got the code from, but it works great for me to control the outgoing traffic. Heiko Quoting Frank Weis <Fra...@ct...>: > Hi all, > > I need to find a way to prioritize traffic (based on source IP) on one > of my low-bandwidth sites. I remember looking into this a long time ago > and coming up without any clue... > > Is there a way to do this with DL and, if so can anyone point me in the > right direction please? > > Thanks a lot > Frank > -- > _______________________________________________ > Centre de Technologie de l'Education > 29 avenue John F. Kennedy > L-1855 Luxembourg-Kirchberg > email: Fra...@ct... > tél.: +352 247-85973 > fax: +352 333797 > _______________________________________________ > > > > > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Frank W. <Fra...@ct...> - 2012-04-24 14:29:33
|
Thanks Heiko, this seems to be rather powerful and yet understandable. I have two constraints that make my problem different, I believe: *) I need to limit incoming traffic (the uplink is symmetrical, and downloads, streaming, youtube, etc sometimes eat the incoming bandwidth) *) I have several internal NICs: the 'bad' guys (ie students) are one one NIC, and the 'nice' guys (School personnel) are behind another NIC. So what I need to do is penalize eth1 over eth3 when [incoming-on-eth0 | outgoing-on eth1 + eth3] exceeds a certain level... I would probably need a qdisc that spreads several devices.... like IMQ (but this is not explained in great detail in LARTC) Thanks for any clues, Frank -- _______________________________________________ Centre de Technologie de l'Education 29 avenue John F. Kennedy L-1855 Luxembourg-Kirchberg email: Fra...@ct... tél.: +352 247-85973 fax: +352 333797 _______________________________________________ On Tue, 2012-04-24 at 08:48 -0500, Heiko Zuerker wrote: > Frank, > > I attached the traffic shaping parts of my firewall script. > I don't remember where I got the code from, but it works great for me > to control the outgoing traffic. > > Heiko > > Quoting Frank Weis <Fra...@ct...>: > > > Hi all, > > > > I need to find a way to prioritize traffic (based on source IP) on one > > of my low-bandwidth sites. I remember looking into this a long time ago > > and coming up without any clue... > > > > Is there a way to do this with DL and, if so can anyone point me in the > > right direction please? > > > > Thanks a lot > > Frank > > -- > > _______________________________________________ > > Centre de Technologie de l'Education > > 29 avenue John F. Kennedy > > L-1855 Luxembourg-Kirchberg > > email: Fra...@ct... > > tél.: +352 247-85973 > > fax: +352 333797 > > _______________________________________________ > > > > > > > > > > > > ------------------------------------------------------------------------------ > > Live Security Virtual Conference > > Exclusive live event will cover all the ways today's security and > > threat landscape has changed and how IT managers can respond. Discussions > > will include endpoint security, mobile security and the latest in malware > > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > > _______________________________________________ > > Devil-linux-discuss mailing list > > Dev...@li... > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > |
|
From: Philippe M. <ph...@oz...> - 2012-04-24 14:29:23
|
On Tue, Apr 24, 2012 at 03:12:14PM +0200, Frank Weis wrote: > Hi all, > > I need to find a way to prioritize traffic (based on source IP) on one > of my low-bandwidth sites. I remember looking into this a long time ago > and coming up without any clue... > > Is there a way to do this with DL and, if so can anyone point me in the > right direction please? It is possible to do QoS for outgoing traffic however not so much for incoming as you cannot modify how fast a peer will send packets to you. I don't know what is provided in Devil, I used to use wondershaper in Debian. It is a set of scripts so should be easily adapted in Devil if needed. Philippe |
|
From: Andrzej O. <an...@ma...> - 2012-04-24 15:01:51
|
Frank Weis wrote: > Is there a way to do this with DL and, if so can anyone point me in the > right direction please? Frank, I'm shaping traffic with Shorewall (built into DL). Using methods described on page www.shorewall.net is possible to shape not only outgoing traffic, but (partially) incoming traffic too. -- Andrzej Odyniec |