On Sat, 2011-02-05 at 12:27 +0000, Andrew Beverley wrote: > On Sat, 2011-02-05 at 02:07 -0400, Optimum Wireless Services wrote: > > Now, for the upload I cant get it shape with squid running in the > > middle. If I remove squid then, traffic shaping works ok. > > > > If you are doing egress shaping on the internet facing interface for the > upload (which I assume you are - you can't use HTB on ingress), then it > will not work for Squid. That's because Squid's traffic leaving the > server is coming from the server's IP address, not from the client's IP > address (Squid is generating the traffic, not the client). Therefore, > your filter will never match the traffic. Normal traffic from a client > is forwarded and retains its source IP address. > Do you think I should go back to this method? I have 120 users now but, that number should be increasing. Which method do you recommend? > One way to shape Squid traffic per client source IP address would be to > mark the packets that are coming in from the local network (as you were > doing before) and then use Squid's mark preservation feature to retain > the packet's mark. However, you can't use U32 classifiers - you'll have > to go back to marking packets. > > > Andy recommended to use ifb but, I don't know where to get the download > > from. Is supposed to be on kernel 2.26.20 and up and I'm running a > > kernel that "qualifies" but, cant really get ifb to do anything. > > No need for IFB in your case. That's only if you want to shape multiple > interfaces within one qdisc. > > Andy > > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
