Re: IMQ + NAT

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jonas Jasas wrote:
Hello,

I have
eth0 - internet
eth1..4 - local networks
on eth0 i do $IPTABLES -A POSTROUTING -t nat -o eth0 -j MASQUERADE

I want to balance out/in load for eth1..4 and localhost (mainly
squid). Nat makes impossible to do it on eth0, so I installed IMQ. I
need to get to on imq0 unnnated in/out traffic that I could make
priorities for protocols and networks. Do somthing like this:
prate=1Mbit

localhost: rate=500kbit, ceil=prate
            vnc: rate=100kbit, ceil=prate
            web: rate=100kbit, ceilp=prate
            mail: rate=100kbit, ceil=prate
eth1: rate=400kbit, ceil=prate
            ftp: rate=10kbit, ceil=prate
            ....
eth2..4: rate=100kbit, ceil=prate (eth2...eth4 would split the same 100kbit)
            rdp: rate=90kbit, ceil=prate
            ......

This load balance would be applyed for outgoing and incoming internet
traffic. Where and how in iptables would be correct to "-j IMQ" ?

Whether IMQ hooks before or after NAT is in the kernel config for 2.6 and needs patches for 2.4.

You need AB = after prerouting, before postrouting (though you could do the latter with marks). IMQ logs where it hooks WRT NAT when loaded.

Ingress traffic will be hooked by -j IMQ --todev 0 in PREROUTING mangle, egress by -j IMQ --todev 1 in POSTROUTING mangle.

Andy.



_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux