Administrace komentářů

#!/bin/bash

INET_IFACE="eth1"
LAN_IFACE="eth0"

HATES="192.168.1.0/24"
LAN="192.168.2.0/24"
WAN="192.168.3.0/24"

# vymaze hlavni qdisc a zaridi novy
iptables -t mangle --flush
tc qdisc del dev $INET_IFACE root
tc qdisc add dev $INET_IFACE root handle 1:0 htb
#hlavni trida
tc class add dev $INET_IFACE parent 1:0 classid 1:1 htb rate 4096kbit burst 5k quantum 1700
tc class add dev $INET_IFACE parent 1:1 classid 1:10 htb rate 4096kbit ceil 4096kbit burst 1k quantum 1700 prio 0
#tc class add dev $INET_IFACE parent 1:1 classid 1:99 htb rate 1024kbit burst 1k quantum 1700 prio 7

############################################################################################
# HATES
tc class add dev $INET_IFACE parent 1:10 classid 1:20 htb rate 1024kbit ceil 2048kbit burst 1k quantum 1700 prio 2

#www
iptables -t mangle -A FORWARD -o $INET_IFACE -d $HATES -p tcp --dport 80 -j MARK --set-mark 201
tc class add dev $INET_IFACE parent 1:20 classid 1:201 htb rate 1024kbit ceil 2048kbit burst 1k quantum 1700 prio 4
tc qdisc add dev $INET_IFACE parent 1:201 handle 201:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 20 handle 201 fw flowid 1:201
#ostatni
iptables -t mangle -A FORWARD -o $INET_IFACE -d $HATES -j MARK --set-mark 203
tc class add dev $INET_IFACE parent 1:20 classid 1:203 htb rate 256kbit ceil 256kbit burst 1k quantum 1700 prio 6
tc qdisc add dev $INET_IFACE parent 1:203 handle 203:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 30 handle 203 fw flowid 1:203
############################################################################################

############################################################################################
# LAN
tc class add dev $INET_IFACE parent 1:10 classid 1:30 htb rate 1024kbit ceil 1024kbit burst 1k quantum 1700 prio 2

#www
iptables -t mangle -A FORWARD -o $INET_IFACE -d $LAN -p tcp --dport 80 -j MARK --set-mark 301
tc class add dev $INET_IFACE parent 1:30 classid 1:301 htb rate 512kbit ceil 512kbit burst 1k quantum 1700 prio 4
tc qdisc add dev $INET_IFACE parent 1:301 handle 301:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 20 handle 301 fw flowid 1:301
#ostatni
iptables -t mangle -A FORWARD -o $INET_IFACE -d $LAN -j MARK --set-mark 303
tc class add dev $INET_IFACE parent 1:30 classid 1:303 htb rate 512kbit ceil 512kbit burst 1k quantum 1700 prio 6
tc qdisc add dev $INET_IFACE parent 1:303 handle 303:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 30 handle 303 fw flowid 1:303
############################################################################################

############################################################################################
# WAN
tc class add dev $INET_IFACE parent 1:10 classid 1:40 htb rate 1024kbit ceil 1024kbit burst 1k quantum 1700 prio 2

#www
iptables -t mangle -A FORWARD -o $INET_IFACE -d $WAN -p tcp --dport 80 -j MARK --set-mark 401
tc class add dev $INET_IFACE parent 1:40 classid 1:401 htb rate 512kbit ceil 512kbit burst 1k quantum 1700 prio 4
tc qdisc add dev $INET_IFACE parent 1:401 handle 401:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 20 handle 401 fw flowid 1:401
#ostatni
iptables -t mangle -A FORWARD -o $INET_IFACE -d $WAN -j MARK --set-mark 403
tc class add dev $INET_IFACE parent 1:40 classid 1:403 htb rate 512kbit ceil 512kbit burst 1k quantum 1700 prio 6
tc qdisc add dev $INET_IFACE parent 1:403 handle 403:0 sfq perturb 10
tc filter add dev $INET_IFACE protocol ip prio 30 handle 403 fw flowid 1:403
############################################################################################ 

server1:/home/hates# tc -d -s qdisc
qdisc pfifo_fast 0: dev eth0 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 1444546287 bytes 1885888 pkts (dropped 0, overlimits 0)
qdisc sfq 403: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc sfq 401: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc sfq 303: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc sfq 301: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc sfq 203: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc sfq 201: dev eth1 limit 128p quantum 1514b flows 128/1024 perturb 10sec
 Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
qdisc htb 1: dev eth1 r2q 10 default 0 direct_packets_stat 11277 ver 3.16
 Sent 4593547 bytes 11277 pkts (dropped 0, overlimits 0)