Portál AbcLinuxu, 12. května 2025 05:09
#!/bin/sh DEV=br0 DEV2=vlan1 iptables -t mangle -F #DOWNLOAD tc qdisc add dev $DEV root handle 1: htb default 13 tc class add dev $DEV parent 1: classid 1:1 htb rate 512kbit burst 6k prio 0 tc class add dev $DEV parent 1:1 classid 1:10 htb rate 256kbit ceil 512kbit burst 6k prio 1 tc class add dev $DEV parent 1:1 classid 1:11 htb rate 256kbit burst 6k prio 1 tc class add dev $DEV parent 1:1 classid 1:13 htb rate 1kbit burst 6k prio 1 tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10 tc qdisc add dev $DEV parent 1:11 handle 11: sfq perturb 10 tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10 tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x10 fw flowid 1:10 tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x11 fw flowid 1:11 tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x13 fw flowid 1:13 #UPLOAD tc qdisc add dev $DEV2 root handle 1: htb default 13 tc class add dev $DEV2 parent 1: classid 1:1 htb rate 128kbit burst 6k prio 0 tc class add dev $DEV2 parent 1:1 classid 1:10 htb rate 64kbit ceil 128kbit burst 6k prio 1 tc class add dev $DEV2 parent 1:1 classid 1:11 htb rate 64kbit burst 6k prio 1 tc class add dev $DEV2 parent 1:1 classid 1:13 htb rate 1kbit burst 6k prio 1 tc qdisc add dev $DEV2 parent 1:10 handle 10: sfq perturb 10 tc qdisc add dev $DEV2 parent 1:11 handle 11: sfq perturb 10 tc qdisc add dev $DEV2 parent 1:13 handle 13: sfq perturb 10 tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x10 fw flowid 1:10 tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x11 fw flowid 1:11 tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x13 fw flowid 1:13 #MARK #BANDWIDTH full 512kbit/128kbit ### class 0x10 256/64 (full) ### class 0x11 256/64 ### class 0x12 not use ### class 0x13 1/1 (harmless/security) #SHAPING 192.168.1.66 256/64 (full) ######## 192.168.1.100 256/64 ######## any 1/1 (security) iptables -t mangle -A POSTROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -j MARK --set-mark 0x13 iptables -t mangle -A POSTROUTING -d 192.168.1.0/24 -s ! 192.168.1.0/24 -j MARK --set-mark 0x13 iptables -t mangle -A POSTROUTING -d 192.168.1.66 -s ! 192.168.1.0/24 -j MARK --set-mark 0x10 iptables -t mangle -A POSTROUTING -s 192.168.1.66 -d ! 192.168.1.0/24 -j MARK --set-mark 0x10 iptables -t mangle -A POSTROUTING -d 192.168.1.100 -s ! 192.168.1.0/24 -j MARK --set-mark 0x11 iptables -t mangle -A POSTROUTING -s 192.168.1.100 -d ! 192.168.1.0/24 -j MARK --set-mark 0x11
Na otázku zatím nikdo bohužel neodpověděl.
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.