Updated tcng configuration

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



You helped me earlier, I was wondering if I couldn't get your advice again. I had very simple ingress/egress policing working and I was very happy. Unfortunately I quickly reached the maximum throughput and my own connections to our FTP server were slow.

I decided it would be best to implement a second filter to give traffic from our network priority. I think I've done that below, but it doesn't seem to be working. I want to dedicate 5Mbps to the "world" and, an additional 10Mbps to my network (12.111.170.0/24).

For whatever reason, it seems that ALL incoming traffic is going to the $cta class, despite the source IP address. If I tweak with the settings for $cta down to 5Mbps the traffic drops accordingly. 99% of the traffic going to the box is "other" I want to leave the possibility that our traffic gets priority if and when we need it. Am I missing something simple here?

-----------------------------------------------

dev "eth0" {
   egress {

/*
//This is what we were using before we had to optimize traffic for our networks
tbf (mtu 1.5kB,limit 10kB,rate 10Mbps,burst 1000kB) {
fifo;
}
*/


      class (<$cta>) if ip_src:24 == 12.111.170.0;
      class (<$other>) if 1;

      htb () {
         class (rate 100Mbps, ceil 100Mbps) {
            $cta = class (rate 10Mbps, ceil 10Mbps) { sfq; };
            $other = class (rate 5Mbps, ceil 5Mbps) { sfq; };
         }
      }
   }

   ingress {
      $p = bucket(rate 10Mbps, burst 1000kB, mpu 200B);
      class (1) if (conform $p && count $p) || drop;
   }
}


Scott Baker - Network Engineer - RHCE
bakers @ web-ster . com - 503.266.8253


_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux