--0-1975817877-1041059632=:6100
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 8bit
My Settings:
LAN--------------| TC |------------------EX
|
DMZ
iptables -t mangle -A OUTPUT -o $DEV -p tcp --dport 80 -j MARK --set-mark 1
iptables -t mangle -A OUTPUT -o $DEV -p tcp --dport 22 -j MARK --set-mark 2
tc qdisc add dev $DEV root handle 1: cbq bandwidth $BANDWIDTH rate 1Mbit avpkt 1000 mpu 64
tc class add dev $DEV parent 1:0 classid 1:2 cbq bandwidth $BANDWIDTH rate $RATE_PRIO allot 1514 maxburst 20 avpkt 1000 isolated bounded
tc class add dev $DEV parent 1:0 classid 1:3 cbq bandwidth $BANDWIDTH rate $RATE_LOW allot 1514 maxburst 20 avpkt 1000 isolated bounded
tc class add dev $DEV parent 1:3 classid 1:5 cbq bandwidth $BANDWIDTH rate $RATE_LOW_FAV allot 1514 maxburst 2 avpkt 1000 isolated bounded
tc class add dev $DEV parent 1:3 classid 1:6 cbq bandwidth $BANDWIDTH rate $RATE_LOW_LOW allot 1514 maxburst 2 avpkt 1000 isolated bounded
tc qdisc add dev $DEV parent 1:2 handle 2: tbf rate 0.5Mbit burst 20kb latency 70ms peakrate 10Mbit minburst 1540
tc qdisc add dev $DEV parent 1:3 handle 3: tbf rate 0.5Mbit burst 20kb latency 70ms peakrate 10Mbit minburst 1540
tc filter add dev $DEV parent 1:0 protocol ip handle 1 fw flowid 1:2
tc filter add dev $DEV parent 1:0 protocol ip handle 2 fw flowid 1:5
tc filter add dev $DEV parent 1:0 protocol ip handle 3 fw flowid 1:6
I land DMZ's ssh or surfing from LAN.
#tc -s class ls dev eth1
class cbq 1: root rate 1Mbit (bounded,isolated) prio no-transmit
Sent 557044 bytes 719 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 6249 undertime 0
class cbq 1:2 parent 1: leaf 2: rate 700Kbit (bounded,isolated) prio no-transmit
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 257728 undertime 0
class cbq 1:3 parent 1: leaf 3: rate 300Kbit (bounded,isolated) prio no-transmit
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 603732 undertime 0
class cbq 1:5 parent 1:3 rate 180Kbit (bounded,isolated) prio no-transmit
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 74457 undertime 0
class cbq 1:6 parent 1:3 rate 120Kbit (bounded,isolated) prio no-transmit
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
borrowed 0 overactions 0 avgidle 111751 undertime 0
why class 1:5 and 1:6 send 0 bytes 0 pkts?
---------------------------------
Do You Yahoo!?
"IBM优惠价特权，谁先来谁先得！"
--0-1975817877-1041059632=:6100
Content-Type: text/html; charset=gb2312
Content-Transfer-Encoding: 8bit
<P>My Settings:</P>
<P>LAN--------------| TC |------------------EX</P>
<P> |</P>
<P> DMZ</P>
<P>iptables -t mangle -A OUTPUT -o $DEV -p tcp --dport 80 -j MARK --set-mark 1</P>
<P>iptables -t mangle -A OUTPUT -o $DEV -p tcp --dport 22 -j MARK --set-mark 2</P>
<P>tc qdisc add dev $DEV root handle 1: cbq bandwidth $BANDWIDTH rate 1Mbit avpkt 1000 mpu 64</P>
<P>tc class add dev $DEV parent 1:0 classid 1:2 cbq bandwidth $BANDWIDTH rate $RATE_PRIO allot 1514 maxburst 20 avpkt 1000 isolated bounded</P>
<P>tc class add dev $DEV parent 1:0 classid 1:3 cbq bandwidth $BANDWIDTH rate $RATE_LOW allot 1514 maxburst 20 avpkt 1000 isolated bounded</P>
<P>tc class add dev $DEV parent 1:3 classid 1:5 cbq bandwidth $BANDWIDTH rate $RATE_LOW_FAV allot 1514 maxburst 2 avpkt 1000 isolated bounded</P>
<P>tc class add dev $DEV parent 1:3 classid 1:6 cbq bandwidth $BANDWIDTH rate $RATE_LOW_LOW allot 1514 maxburst 2 avpkt 1000 isolated bounded</P>
<P>tc qdisc add dev $DEV parent 1:2 handle 2: tbf rate 0.5Mbit burst 20kb latency 70ms peakrate 10Mbit minburst 1540<BR>tc qdisc add dev $DEV parent 1:3 handle 3: tbf rate 0.5Mbit burst 20kb latency 70ms peakrate 10Mbit minburst 1540<BR>tc filter add dev $DEV parent 1:0 protocol ip handle 1 fw flowid 1:2</P>
<P>tc filter add dev $DEV parent 1:0 protocol ip handle 2 fw flowid 1:5<BR>tc filter add dev $DEV parent 1:0 protocol ip handle 3 fw flowid 1:6<BR></P>
<P>I land DMZ's ssh or surfing from LAN.</P>
<P>#tc -s class ls dev eth1<BR>class cbq 1: root rate 1Mbit (bounded,isolated) prio no-transmit<BR> Sent 557044 bytes 719 pkts (dropped 0, overlimits 0)<BR> borrowed 0 overactions 0 avgidle 6249 undertime 0<BR>class cbq 1:2 parent 1: leaf 2: rate 700Kbit (bounded,isolated) prio no-transmit<BR> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)<BR> borrowed 0 overactions 0 avgidle 257728 undertime 0<BR>class cbq 1:3 parent 1: leaf 3: rate 300Kbit (bounded,isolated) prio no-transmit<BR> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)<BR> borrowed 0 overactions 0 avgidle 603732 undertime 0<BR>class cbq 1:5 parent 1:3 rate 180Kbit (bounded,isolated) prio no-transmit<BR> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)<BR> borrowed 0 overactions 0 avgidle 74457 undertime 0<BR>class cbq 1:6 parent 1:3 rate 120Kbit (bounded,isolated) prio no-transmit<BR> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)<BR> borrowed 0 overactions 0 avgidle 111751 undertime 0<BR></P>
<P>why class 1:5 and 1:6 send 0 bytes 0 pkts?</P><p><br><hr size=1><b>Do You Yahoo!?</b><br>
<a href="http://rd.yahoo.com/mail_cn/tag/?http://ad.cn.doubleclick.net/clk;4983632;7740969;c?http://www.ibm.com/cn/promotion/optin/reg.shtml";>"IBM优惠价特权，谁先来谁先得！"</a>
--0-1975817877-1041059632=:6100--
