Troubles with tc/iptables - per TCP session tc

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
 
I have read most of the relevant emails already posted to the LARTC mailingilist and I have not found a solution to my problem.
 
What I am trying to do is: limit the HTTP output traffic to 30Mbps and also to limit each HTTP connection at 512Kbps, if the client downloads more than 1MB. I have managed to limit the total traffic but not the traffic of each HTTP connection.
 
Here it is my setup:
 
/sbin/tc qdisc add dev eth0 root handle 1:0 htb default 1
/sbin/tc class add dev eth0 parent 1:0 classid 1:1 htb rate 100mbit
/sbin/tc class add dev eth0 parent 1:1 classid 1:11 htb rate 512kbit ceil 512kbit
/sbin/tc class add dev eth0 parent 1:1 classid 1:12 htb rate 30mbit  ceil 30mbit

/sbin/iptables --table mangle --append POSTROUTING --out-interface eth0 --protocol tcp --sport 80 -m connbytes --connbytes 1024000: --connbytes-dir reply --connbytes-mode bytes --jump CLASSIFY --set-class 1:11
/sbin/iptables --table mangle --append POSTROUTING --out-interface eth0 --protocol tcp --sport 80 --jump CLASSIFY --set-class 1:12
 
I have tried, without success, to mark the matching packets with iptables and redirect a marked packet to class 1:11:
 
/sbin/iptables --table mangle --append POSTROUTING --out-interface eth0 --protocol tcp --sport 80 -m connbytes --connbytes 1024000: --connbytes-dir reply --connbytes-mode bytes --jump MARK --set-mark 11
/sbin/tc filter add dev eth0 parent 0: prio 0 protocol ip handle 11 fw classid 11

Any clue or ideas ? What I am doing wrong ?
 
Thank you,
George
 


Hotmail to go? Get your Hotmail, news, sports and much more! Check out the New MSN Mobile
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux