On Wednesday 30 April 2003 13:08, Girts Folkmanis wrote:
> Hello!
>
> First, excuse me for the dumb questions as currently I don't have much
> experience in this field. I looked through all the documentation and I
> haven't found an answer to my problem.
>
> The situation is following:
>
> I need to do shaping (or is it called policing?) on Linux on the
> incoming traffic _in bridge mode_. Each "user" is shaped according to a
> token bucket filter, so that the rate and bucket size can be configured.
> "User" is determined by IP address, so one "user" could have several IP
> addresses that all point to the same bucket. No borrowing is needed. The
> solution should be CPU-friendly, as the data flow is about 100 Mbps,
> maybe even more.
>
> What combination of software should I use? Ebtables in combination with
> u32 and sch_tbf?
>
> I would be very grateful if you could give me some hints what to look at
> and what documentation to read. There are different guides for
> configuring shaping in IP level, but I haven't found any for bridging.
Policing incoming traffic can be done with the infress qdisc and u32 +
policers. A policer is some sort of tbf in the filter. This is limited in
usage. You can only limit some traffic.
If you want to shape incoming bandwidth with htb or cbq, you need the ingress
qdisc, or shape the outgoing traffic on the other nic. This can be more
complex, you can share bandwidth between users in a controlled way.
Stef
--
stef.coene@xxxxxxxxx
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
