hi all
i'm pretty new to tc and have not understand a lot of the whole stuff
... but pleas help me!
i tried to use the 'The Ultimate Traffic Conditioner' - cbq version -
as it is in 'Linux Advanced Routing & Traffic Control HOWTO' chapter 15.
the uplink part i think is working but the download is not working: the
connection to the internet seems to be broken (i can't ping any
computer). i changed the filter in the download part to only one
ip-address (from 0.0.0.0/0 to 130.59.10.30) to test the filter on this
ip-address. the download part of the script is now
--- form 'The Ultimate Traffic Conditioner:'
DOWNLINK=250
DEV=eth1
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null
######### downlink #############
# slow downloads down to somewhat less than the real speed to prevent
# queuing at our ISP. Tune to see how high you can set it.
# ISPs tend to have *huge* queues to make sure big downloads are fast
#
# attach ingress policer:
tc qdisc add dev $DEV handle ffff: ingress
# filter *everything* to it (0.0.0.0/0), drop everything that's
# coming in too fast:
tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
130.59.10.30 police rete ${DOWNLINK}kbit burst 10k drop flowid :1
--
with this setup i can ping all ip-addresses without 130.59.10.30. from
the tcpdum i get this information (altair is the computer where tc is
running):
-- output of tcpdump -i eth1
19:16:10.525629 altair.ethz.ch > 130.59.10.30: icmp: echo request (DF)
19:16:10.561771 130.59.10.30 > altair.ethz.ch: icmp: echo reply (DF)
19:16:11.525697 altair.ethz.ch > 130.59.10.30: icmp: echo request (DF)
19:16:11.560400 130.59.10.30 > altair.ethz.ch: icmp: echo reply (DF)
--
so i think the ping can't pass the above filter. if i comment the 'tc
filter add...' out, everything is working fine (but the buffer at my ISP
is growing and growing :( ).
so, do i do something wrong or is this a bug in this script ore elsewhere?
thanks for your help
oliver
ps: some more information about my setup
- on altair there is also running NAT (but the tc-stuff is also not
working without NAT)
- i use a adsl-modem attached to eth1
- altair:~# tc -V
tc utility, iproute2-ss010824
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
