On Fri, Nov 26, 2004 at 02:41:26PM -0200, James Lista wrote:
> please, what do those 2 following lines do ? mainly that "drop flowid :1"
> ?
>
> tc qdisc add dev $WAN handle ffff: ingress
tells the kernel that it should be ready to do ingress filtering on device
$WAN (well, actually it is called policing not filtering, because ingress'
functionality is limited)
> tc filter add dev $WAN parent ffff: protocol ip prio 50 u32 match ip src
> 0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
the aforementioned ingress policy should match all ip packets, rate limit them
to ${DOWNLINK} kbit/s with a 10k burst, and overlimits should be dropped. The
flowid :1 is in my guess necessary in order for "tc" to accept the filter, but
doesn't have any practical effect because ingress can't do classful stuff.
Bye,
Peter Surda (Shurdeek) <shurdeek@xxxxxxxxxxxx>, ICQ 10236103, +436505122023
--
Press every key to continue.
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
