> Try the following filters: > > tc filter add dev $INT parent 1:0 protocol ip prio 1 handle 1 fw flowid > 1:10 tc filter add dev $INT parent 1:0 protocol ip prio 2 handle 55 fw > flowid 1:20 > > > and check your filters and classes with the following commands: > > # tc -s filter show dev eth0 > # tc -s class show dev eth0 > # tc -s filter show dev eth0 filter parent 1: protocol ip pref 1 fw filter parent 1: protocol ip pref 1 fw handle 0x1 classid 1:10 filter parent 1: protocol ip pref 2 fw filter parent 1: protocol ip pref 2 fw handle 0x37 classid 1:20 # tc -s class show dev eth0 class htb 1:1 root rate 100000Kbit ceil 100000Kbit burst 15337b cburst 1600b Sent 908323001 bytes 680443 pkt (dropped 0, overlimits 0 requeues 0) rate 2976bit 2pps backlog 0b 0p requeues 0 lended: 38250 borrowed: 0 giants: 0 tokens: 19047 ctokens: 1860 class htb 1:10 parent 1:1 prio 0 rate 63000bit ceil 1200Kbit burst 15Kb cburst 1599b Sent 2769846 bytes 41947 pkt (dropped 0, overlimits 0 requeues 0) rate 8bit 0pps backlog 0b 0p requeues 0 lended: 3697 borrowed: 38250 giants: 0 tokens: -56194 ctokens: 144355 class htb 1:20 parent 1:1 prio 0 rate 63000bit ceil 63000bit burst 15Kb cburst 1599b Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) rate 0bit 0pps backlog 0b 0p requeues 0 lended: 0 borrowed: 0 giants: 0 tokens: 30476187 ctokens: 3174593 class htb 1:30 parent 1:1 prio 0 rate 88000Kbit ceil 88000Kbit burst 15Kb cburst 1584b Sent 905553155 bytes 638496 pkt (dropped 0, overlimits 0 requeues 0) rate 2968bit 2pps backlog 0b 0p requeues 0 lended: 80486 borrowed: 0 giants: 0 tokens: 21656 ctokens: 2109 It seems there are packets which pass through the class 1:10. However, I've dowloaded a 100Mo file, so it seems that most of packets pass through the default class... The cause could be my design... I have a pc which downloads a file on a web server, through the proxy server. They are all on the same network. The proxy server has only one network card (eth0). They are linked by 100Mbit links. Squid mark packets from my pc and send them to netfilter. Considering these informations, have I miss something in my tc configuration ? Must I use iptables to mark incoming traffic from the web server ? Thanks for your help, Grégoire Leroy
Attachment:
signature.asc
Description: This is a digitally signed message part.
