[LARTC] In what order are CBQ and iptables applied?

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C2BD5C.C331B1D0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Let's say I have two Ethernet interfaces (eth0 and eth1).  I am trying =
to
shape multiple TCP connections to 56K from one 100MBit pipe.

CLIENT  ----------  ETH0  --------  ETH1  ----------  SERVER
192.168.1.1     192.168.1.254   172.16.1.254      172.16.1.1

For example, I want the client to be able to make multiple TCP =
connections
(.1.1:80, .1.1:8081, .1.1:8082) all at 56K from the server, which =
obviously
has the ability to deliver 100MBit.

My CBQ file looks like so:
	DEVICE=3Deth0,100MBit,10Mbit
	RATE=3D56Kbit
	WEIGHT=3D5Kbit
	PRIO=3D5
	RULE=3D192.168.1.1/24:80
	RULE=3D192.168.1.1/24:8081
	RULE=3D192.168.1.1/24:8082
	RULE=3D192.168.1.1/24:8083
	RULE=3D192.168.1.1/24:8084
	RULE=3D192.168.1.1/24:8085

Is it possible to use iptables to make all the connections' destination
ports appear to be port 80?  How, and to which interface, should I =
apply the
rules?

Also, when is CBQ applied?  Prerouting? Postrouting? Is it applied pre- =
or
post-routing specific to the interface, or to the kernel?


Tom Masse
Engineer, Network Operations
G=F3mez, Inc.

T 781.768.2134
F 781.466.1434

Maximize Your Internet Channel Effectiveness=20
http://www.gomez.com/


------_=_NextPart_001_01C2BD5C.C331B1D0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>In what order are CBQ and iptables applied?</TITLE>
</HEAD>
<BODY>
<BR>

<P><FONT SIZE=3D2 FACE=3D"Arial">Let's say I have two Ethernet =
interfaces (eth0 and eth1).&nbsp; I am trying to shape multiple TCP =
connections to 56K from one 100MBit pipe.</FONT></P>

<P><FONT SIZE=3D2 FACE=3D"Courier New">CLIENT&nbsp; ----------&nbsp; =
ETH0&nbsp; --------&nbsp; ETH1&nbsp; ----------&nbsp; SERVER</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New">192.168.1.1&nbsp;&nbsp;&nbsp;&nbsp; 192.168.1.254&nbsp;&nbsp; =
172.16.1.254&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 172.16.1.1</FONT>
</P>

<P><FONT SIZE=3D2 FACE=3D"Arial">For example, I want the client to be =
able to make multiple TCP connections (.1.1:80, .1.1:8081, .1.1:8082) =
all at 56K from the server, which obviously has the ability to deliver =
100MBit.</FONT></P>

<P><FONT SIZE=3D2 FACE=3D"Arial">My CBQ file looks like so:</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">DEVICE=3Deth0,100MBit,10Mbit</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RATE=3D56Kbit</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">WEIGHT=3D5Kbit</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">PRIO=3D5</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:80</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:8081</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:8082</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:8083</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:8084</FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =
FACE=3D"Courier New">RULE=3D192.168.1.1/24:8085</FONT>
</P>

<P><FONT SIZE=3D2 FACE=3D"Arial">Is it possible to use iptables to make =
all the connections' destination ports appear to be port 80?&nbsp; How, =
and to which interface, should I apply the rules?</FONT></P>

<P><FONT SIZE=3D2 FACE=3D"Arial">Also, when is CBQ applied?&nbsp; =
Prerouting? Postrouting? Is it applied pre- or post-routing specific to =
the interface, or to the kernel?</FONT></P>
<BR>

<P><B><FONT SIZE=3D2 FACE=3D"Arial">Tom Masse</FONT></B>
<BR><FONT SIZE=3D2 FACE=3D"Arial">Engineer, Network Operations</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">G=F3mez, Inc.</FONT>
</P>

<P><FONT SIZE=3D2 FACE=3D"Arial">T 781.768.2134</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">F 781.466.1434</FONT>
</P>

<P><I><FONT SIZE=3D2 FACE=3D"Arial">Maximize Your Internet Channel =
Effectiveness</FONT></I><FONT SIZE=3D2 FACE=3D"Arial"> </FONT>
<BR><U><FONT SIZE=3D2 FACE=3D"Arial"><A HREF=3D"http://www.gomez.com/"; =
TARGET=3D"_blank">http://www.gomez.com/</A></FONT></U>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C2BD5C.C331B1D0--


[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux