Newbe: restricting traffic to gateway

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I have a linux fileserver on my local network which (besides other things) serves as p2p machine. The network is connected to the internet through a hardware ADSL (512/256) router.
What happens now is that my SSH and webtraffic (from other machines) becomes bogged down when loads of up- and downloads happen at the fileserver. As the fileserver does not do NAT for me, I can't use wondershaper to make things happen.


After reading through the manual, I came up with the following theoretical solution: Limit the transfer of the fileserver to the gateway to the speed of my internet connection. So far so good (ah, please interrupt if I am wrong here ;))

Also in the manual, I found the following lines of code which I thought would be able to do the trick:


tc qdisc add dev eth0 root handle 1: cbq avpkt 1000 bandwidth 100mbit


tc class add dev eth0 parent 1: classid 1:1 cbq rate 500kbit \
  allot 1500 prio 5 bounded isolated

tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \
  match ip dst 192.168.1.1\
  flowid 1:1


My gateway has ip 192.168.1.1


However, nothing happens. Is it that the filter rule does not match because the destination IP's are not equal to the gateway IP? In that case how can I limit the traffic?
I tried a filter for source port, but that didn't work either.
(
tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \
match ip sport 4669 0xffff\
flowid 1:1


)

Any suggestions?


With kind regards


Benjamin Hirsch

PS: I apologize if the question was already asked (and answered) before, but I am still trying to understand what is going on, so it's hard for me to recognize relevant posts.
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux