Hello everybody on the list,
I have the following situation where I want to police the speed of incoming
packets from specific subnets to 1024kbps and then police all the rest to
256kbps, which is the speed my ISP grants for the rest of the internet.
So, eth1 is the one connected to the cable modem and then to the internet.
I do:
tc qdisc add dev eth1 ingress handle ffff:
then:
tc filter add dev eth1 parent ffff: protocol ip prio 1 u32 match ip src
xx.yy.zz.0/24 police rate 1024kbit burst 10kb drop flowid ffff:
tc filter add dev eth1 parent ffff: protocol ip prio 1 u32 match ip src
pp.dd.df.0/23 police rate 1024kbit burst 10kb drop flowid ffff:
...
...
and finally:
tc filter add dev eth1 parent ffff: protocol ip prio 2 u32 match ip src
0.0.0.0/0 police rate 256kbit burst 10kb drop flowid ffff:
My question is, is there a way I can limit the overall speed of incoming
packets from all of those defined subnets to 1024kbps, as it seems in the
above scenario that if packets from xx.yy.zz.0/24 subnet arrive at the speed
of 1024kbps, and at the same time packets are arriving from pp.dd.df.0/23 at
1024kbps the overall would be 2048kbps, which I do not want.
Any comments or suggestions on this topic are welcomed.
Another question I have is, what is the difference of the burst/buffer being
10kb or 90kb for example? What difference would that make?
Regards,
-Nikolay Kichukov
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
