Administrace komentářů

#! /bin/bash

# definujeme cesty v systemu
PATH="/usr/sbin:/usr/bin:/sbin:/bin"

DEV="eth0" # Zarizeni na kterem nenatujeme!
RATE="102400" # Maximalni rychlost linky v kbitech, nyni 100Mbit

IP_ADRESY_TRIDA_A="192.168.190.0/24"
IP_ADRESY_TRIDA_B="172.16.1.254"

# Smazeme vsechny root qdisc
I="1"
while true; do
    if [ "`tc qdisc | grep -v 0: | cut -d \" \" -f3 | sed -n ${I}p`" ]; then
        tc qdisc del dev "`tc qdisc | grep -v 0: | cut -d \" \" -f5 | sed -n ${I}p`" root &>/dev/null
        tc qdisc del dev "`tc qdisc | grep -v 0: | cut -d \" \" -f5 | sed -n ${I}p`" ingress &>/dev/null
    else
        break
    fi
    i="`expr 1 + $I`"
done
#
# Deaktivuji vsechna ifb zarizeni
I="1"
while true; do
    if [ "`ip link show | grep ifb | cut -d \" \" -f 2 | cut -d: -f1 | sed -n ${I}p`" != "" ]; then
        ip link set "`$IP link show | grep ifb | cut -d \" \" -f 2 | cut -d: -f1 | sed -n ${I}p`" down
    else
        break
    fi
    I="`expr $I + 1`"
done
# Odstraneni modulu pro ifb
rmmod -f ifb &>/dev/null

# Zavedeni modulu pro ifb
modprobe ifb numifbs=1 &>/dev/null

# Zacatek ifb0
tc qdisc add dev $DEV ingress
tc filter add dev $DEV parent ffff: protocol ip prio 10 u32 match u32 0 0 flowid 1:0 action mirred egress redirect dev ifb0

# Chceme nasadit stejny QoS jak na odchozi tak na prichozi provoz na danem rozhrani
for DEV in $DEV ifb0; do
    # Vytvorime root qdisc
    tc qdisc add dev $DEV root handle 1:0 prio bands 3 priomap 2 2 2 2 2 2 0 0 2 2 2 2 2 2 2 2

    # Ve trech zakladnich prio tridach vytvorime esfq pro nelimitovany traffic a htb pro limitovany
    tc qdisc add dev $DEV parent 1:1 handle 11:0 sfq perturb 10
    tc qdisc add dev $DEV parent 1:2 handle 12:0 sfq perturb 10
    tc qdisc add dev $DEV parent 1:3 handle 13:0 hfsc default 111

    # Zakladni hfsc tride dame plnou rychlost, dalsi budou mit rychlost sdilenou HTTP,mail, DC++,
    tc class add dev $DEV parent 13:0 classid 13:1 hfsc ls m2 ${RATE}kbit ul m2 ${RATE}kbit # nastavime maximum omezovani na 100Mbit
    tc class add dev $DEV parent 13:1 classid 13:111 hfsc ls m2 $[5*${RATE}/10]kbit ul m2 ${RATE}kbit # 50Mbit, strop 100Mbit
    tc class add dev $DEV parent 13:1 classid 13:112 hfsc ls m2 $[${RATE}/100]kbit ul m2 $[2*${RATE}/100]kbit # 1024kbit, strop 2048kbit
    tc class add dev $DEV parent 13:1 classid 13:113 hfsc ls m2 $[${RATE}/100]kbit ul m2 $[1*${RATE}/100]kbit # 1024kbit, strop 1024kbit

    # V kazde tride jeste pouziji sfq
    tc qdisc add dev $DEV parent 13:111 handle 111:0 sfq perturb 10
    tc qdisc add dev $DEV parent 13:112 handle 112:0 sfq perturb 10
    tc qdisc add dev $DEV parent 13:113 handle 113:0 sfq perturb 10

    # Pro tideni paketu pouziji tc
    for IP in $IP_ADRESY_TRIDA_A; do
        tc filter add dev $DEV parent 13:0 protocol ip u32 match ip src $IP flowid 13:112
        tc filter add dev $DEV parent 13:0 protocol ip u32 match ip dst $IP flowid 13:112
    done
    for IP in $IP_ADRESY_TRIDA_B; do
        tc filter add dev $DEV parent 13:0 protocol ip u32 match ip src $IP flowid 13:113
        tc filter add dev $DEV parent 13:0 protocol ip u32 match ip dst $IP flowid 13:113
    done
done