Net Pipe --------- eth1 Bridge/Firewall eth0 -------- Internal Hosting Network
lately we have been looking at htb to somehow control excessive usage from the users behind, but in our implementation there seems to be an error or something wrong on the setup,
this is the test script i'm using, i know it's very rough but i think it should do the work.
tc qdisc del dev eth1 root
tc qdisc add dev eth1 root handle 1: htb default 10
tc class add dev eth1 parent 1: classid 1:1 htb rate 98Mbit ceil 98Mbit
tc class add dev eth1 parent 1:1 classid 1:10 htb rate 90Mbit ceil 90Mbit
tc class add dev eth1 parent 1:1 classid 1:11 htb rate 2Mbit ceil 2Mbit
tc class add dev eth1 parent 1:1 classid 1:12 htb rate 4Mbit ceil 4Mbit
tc filter add dev eth1 protocol ip parent 1:0 prio 1 u32 match ip src $server_ip flowid 1:11
I intend to limit $server_ip to 2Mbit max traffic ow, the problem is after i run the script htb seems to ignore the limit and traffic for the client stays in over 3mbit.
but after a while of running with the htb active the server owner complains that the loading times of pages hosted on the server skyrocket and that ssh access becomes sluggish.
Normally that server has about 4/5 Mbit/s of outgoing traffic measured by the iptables/mrtg script, doing a:
#tc -s -d class show dev eth1
shows:
class htb 1:11 parent 1:1 prio 0 quantum 26214 rate 2Mbit ceil 2Mbit burst 2621b/8 mpu 0b cburst 2621b/8 mpu 0b level 0
Sent 23592359 bytes 26524 pkts (dropped 1579, overlimits 0)
rate 315631bps 352pps backlog 96p
lended: 26428 borrowed: 0 giants: 0
tokens: -3 ctokens: -3
class htb 1:1 root rate 98Mbit ceil 98Mbit burst 64212b/8 mpu 0b cburst 64212b/8 mpu 0b level 7
Sent 66766024 bytes 97843 pkts (dropped 0, overlimits 0)
rate 889284bps 1291pps
lended: 0 borrowed: 0 giants: 0
tokens: 1 ctokens: 1
class htb 1:10 parent 1:1 prio 0 quantum 200000 rate 90Mbit ceil 90Mbit burst 58970b/8 mpu 0b cburst 58970b/8 mpu 0b level 0
Sent 43271713 bytes 71415 pkts (dropped 0, overlimits 0)
rate 573411bps 938pps
lended: 71415 borrowed: 0 giants: 0
tokens: 1 ctokens: 1
class htb 1:12 parent 1:1 prio 0 quantum 52428 rate 4Mbit ceil 4Mbit burst 2620b/8 mpu 0b cburst 2620b/8 mpu 0b level 0
Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
lended: 0 borrowed: 0 giants: 0
tokens: 1 ctokens: 1
Showing trafic in excess of 3.5 Mbit/s and coinciding with a mrtg graphic.
From my limited experience i would say that somehow my mrtg is measuring traffic well before it passes thru htb (which seems imposible from what i've read). i take the measurement on the
iptables FORWARD chain:
iptables -N $server_ip-in iptables -N $server_ip-out iptables -A $server_ip-in -j RETURN iptables -A $server_ip-out -j RETURN iptables -A FORWARD -s $server_ip -j $server_ip-out iptables -A FORWARD -d $server_ip -j $server_ip-in
and to make the actual measurement: iptables -nvxL $server_ip-in iptables -nvxL $server_ip-out
Resuming, how can i effectively test if and how well htb it's doing the job ?
Help will be appreciated.
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
