On Thursday 04 December 2003 21:24, Greg Freeman wrote:
> Stef,
> The current set of rules I have in it are as follows:
>
>
> tc qdisc add dev ipsec0 root handle 1: htb default 20
> tc class add dev ipsec0 parent 1: classid 1:1 htb rate 600kbit ceil
> 640kbit burst 2k
> tc class add dev ipsec0 parent 1:1 classid 1:10 htb rate 240kbit
> tc class add dev ipsec0 parent 1:2 classid 1:20 htb rate 400kbit
> tc filter add dev ipsec0 parent 1:0 prio 0 protocol ip handle 10 fw
> flowid 1:10
> tc filter add dev ipsec0 parent 1:0 prio 0 protocol ip handle 20 fw
> flowid 1:20
> iptables -A PREROUTING -t mangle -p ALL -j MARK --set-mark 20 iptables
> -A PREROUTING -t mangle -p ALL -d 10.0.1.20 -j MARK --set-mark 10
> iptables -A PREROUTING -t mangle -p ALL -j MARK --set-mark 20 iptables
> -A PREROUTING -t mangle -p ALL -d 10.0.1.21 -j MARK --set-mark 10
> iptables -A PREROUTING -t mangle -p ALL -j MARK --set-mark 20 iptables
> -A PREROUTING -t mangle -p ALL -d 10.0.1.22 -j MARK --set-mark 10
>
>
>
> This still does not solve the latency (or even seem to affect it, but
> perhaps this is a better route in trying to solve this issue?) Please
> let me know you thoughts,
Try this :
tc qdisc del dev ipsec0 root
tc qdisc add dev ipsec0 root handle 1: htb default 20
tc class add dev ipsec0 parent 1: classid 1:1 htb rate 600kbit ceil 600kbit
tc class add dev ipsec0 parent 1:1 classid 1:10 htb rate 240kbit ceil 600kbit
tc class add dev ipsec0 parent 1:2 classid 1:20 htb rate 400kbit ceil 500kbit
tc filter add dev ipsec0 parent 1:0 prio 0 protocol ip handle 0x10 fw flowid
1:10
tc filter add dev ipsec0 parent 1:0 prio 0 protocol ip handle 0x20 fw flowid
1:20
iptables -F -t mangle
iptables -A PREROUTING -t mangle -p ALL -d 10.0.1.20 -j MARK --set-mark 0x10
iptables -A PREROUTING -t mangle -p ALL -d 10.0.1.21 -j MARK --set-mark 0x10
iptables -A PREROUTING -t mangle -p ALL -d 10.0.1.22 -j MARK --set-mark 0x10
10.1.1.20/21/22 are the VoIP systems ?
Stef
--
stef.coene@xxxxxxxxx
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.openprojects.net
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
