Re: how flexible is ingress traffic policing to bandwidth limit?

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tuesday 08 June 2004 14:35, Greg Stark wrote:
> [I sent this earlier but I guess the list is subscriber-only?]
>
> I just set up wondershaper, it has a simple filter on the downstream
> direction to limit the bandwidth usage:
>
> tc qdisc add dev $DEV handle ffff: ingress
> tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
>    0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
>
> This is effective but is there any way to tell it to choose only certain
> kinds of streams for dropping packets? Minimally I would want to tell it to
> never drop any packets in a certain list of port numbers.

ingress is rather weak.  You can only really police with it.  For what you 
want most people setup the IMQ[1] device and you egress filters on it to 
control what is shaped and how.

[1] http://trash.net/~kaber/imq/

<snip>

_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux