Qvno sum maloumen neshto. Imam slednata mashina, koiato raboti s
radius,pptp. Opitvam se da si razdelia peer/international i
ot ip-up.local da shape-vam ppp-tata. ip-up.local mi e
sledniia.
tc=/sbin/tc
dev="$1"
qdisc="$tc qdisc add dev $dev"
class="$tc class add dev $dev"
filter="$tc filter add dev $dev"
i_filter="handle 1 fw"
p_filter="handle 2 fw"
l_filter="handle 3 fw"
int=64kbit
intd=128kbit
peer=128kbit
peerd=256kbit
local=10mbit
$qdisc root handle 1: htb
$qdisc handle ffff: ingress
#International
$class parent 1: classid 1:11 htb quantum 1500 rate $int
ceil $int
$filter parent 1: protocol ip prio 1 $i_filter flowid 1:11
$filter parent ffff: protocol ip prio 1 $i_filter police
rate $intd ceil $intd mtu 1500 flowid 2:11
#Peer
$class parent 1: classid 1:12 htb rate $peer ceil $peer
$filter parent 1: protocol ip prio 1 $p_filter flowid 1:12
$filter parent ffff: protocol prio 1 $p_filter police rate
$peerd ceil $peerd mtu 1500 flowid 2:12
#Local
$class parent 1: classid 1:13 htb rate $local ceil $local
$filter parent 1: protocol ip prio 1 $l_filter flowid 1:13
$filter parent ffff: protocol prio 1 $l_filter police rate
$local ceil $local mtu 1500 flowid 2:13
eto mi i samoto razdeliane.
for i in `grep -v \# nets`; do
echo iptables -t mangle -A PREROUTING -d $i -j PEERS
>> ipt
echo iptables -t mangle -A PREROUTING -d $i -j
RETURN >> ipt
echo iptables -t mangle -A PREROUTING -s $i -j PEERS
>> ipt
echo iptables -t mangle -A PREROUTING -s $i -j
RETURN >> ipt
done
nl=`cat ipt|wc -l`
if [ $nl -gt 100 ]; then
sh ipt
fi
iptables -t mangle -A PEERS -s random.real.network.16/28 -j
MARK --set-mark 2
iptables -t mangle -A PREROUTING -s
random.real.network.16/28 -j MARK --set-mark 1
iptables -t mangle -A PEERS -d random.real.network.16/28 -j
MARK --set-mark 2
iptables -t mangle -A PREROUTING -d
random.real.network.16/28 -j MARK --set-mark 1
37363 2871K MARK all -- * *
random.real.network.16/28 0.0.0.0/0 MARK set
0x2
26737 4279K MARK all -- * * 0.0.0.0/0
random.real.network.16/28 MARK set 0x2
Problema mi e che ingress police-te mi iavno neshto ne sa v red
zashtoto ogranichenieto mi za dl ot peer 256kbit no raboti na
128kbit.
Ako niakoi mozhe da mi pomogne.
thanks in advance
|
