traffic shaping documentation
Hi all,
I have a gateway on which I would like to implement traffic shapping based only on ports. The simple schema:
15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> Internet
The gateway is also my workstation and it holds many services accessibles from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote servers I manage are slow.
Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)
The perfect would be to shape it on the OUTPUT chain, because I would like also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what I want:
- is a good idea
- implementable
- is documented in another place than lartc.org
(which is good but too much big for my simple needs)
Thank you for any tips.
Signature · 4 lines
Chef de projet chez Vectoris
Phone: +261 33 11 207 36
System: xUbuntu 8.10 with almost all from package install
http://www.google.com/search?q=mihamina+rakotomandimbyHello,
By your signature, I suppose you read french. Then, maybe you will find some useful information in the doc I wrote a few months ago :
http://wiki.linuxwall.info/doku.php?id=ressources:dossiers:advanced_networking:2_qos_traffic_control
Hope it helps...
Julien
Quoted 2 lines · On Tue, 21 Apr 2009 11:50:05 +0300, "Mihamina Rakotomandimby (R12y)"…
Hi all,
I have a gateway on which I would like to implement traffic shapping
based
Quoted 12 lines
only on ports.
The simple schema:15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> InternetThe gateway is also my workstation and it holds many services accessibles
from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote servers I manage are slow.
Quoted 7 lines
Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)The perfect would be to shape it on the OUTPUT chain, because I would
like
Quoted 3 lines
also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what I
want:
Quoted 6 lines
- is a good idea
- implementable
- is documented in another place than lartc.org (which is good but too much big for my simple needs)Thank you for any tips.
Signature · 2 lines
julien http://jve.linuxwall.info/blog
I was seeing your doc in French , do you have an englsih version ???
Thanks a lot
Marcos
----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "Mihamina Rakotomandimby (R12y)" <[email protected]>
Cc: <[email protected]>
Sent: Tuesday, April 21, 2009 8:18 AM
Subject: Re: traffic shaping documentation
Quoted 5 lines
Hello,
By your signature, I suppose you read french. Then, maybe you will find some useful information in the doc I wrote a few months ago :
http://wiki.linuxwall.info/doku.php?id=ressources:dossiers:advanced_networki
ng:2_qos_traffic_control
Quoted 16 lines
Hope it helps...
Julien
Quoted 2 lines · On Tue, 21 Apr 2009 11:50:05 +0300, "Mihamina Rakotomandimby (R12y)"…
Hi all,
I have a gateway on which I would like to implement traffic shappingbased
Quoted 6 lines
only on ports.
The simple schema:15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> InternetThe gateway is also my workstation and it holds many services
accessibles
Quoted 33 lines
Quoted 6 lines
from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote servers I manage are slow.
Quoted 7 lines
Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)The perfect would be to shape it on the OUTPUT chain, because I would
like
Quoted 3 lines
also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what I
want:
Quoted 6 lines
- is a good idea
- implementable
- is documented in another place than lartc.org (which is good but too much big for my simple needs)Thank you for any tips.
--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
I fear not... which's lame, I admit, but I never found the time and motivation to write in english...
A quick try on google trad gives good results though.... :)
Quoted 5 lines · SISINT BA
I was seeing your doc in French , do you have an englsih version ???
Thanks a lot
Marcos
Quoted 14 lines
----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "Mihamina Rakotomandimby (R12y)" <[email protected]>
Cc: <[email protected]>
Sent: Tuesday, April 21, 2009 8:18 AM
Subject: Re: traffic shaping documentationQuoted 5 lines
Hello,
By your signature, I suppose you read french. Then, maybe you will find some useful information in the doc I wrote a few months ago :
http://wiki.linuxwall.info/doku.php?id=ressources:dossiers:advanced_networki
Quoted 52 lines
ng:2_qos_traffic_control
Quoted 16 lines
Hope it helps...
Julien
Quoted 2 lines · On Tue, 21 Apr 2009 11:50:05 +0300, "Mihamina Rakotomandimby (R12y)"…
Hi all,
I have a gateway on which I would like to implement traffic shappingbased
Quoted 6 lines
only on ports.
The simple schema:15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> InternetThe gateway is also my workstation and it holds many services
accessibles
Quoted 34 lines
Quoted 7 lines
from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote
servers I manage are slow.Quoted 7 lines
Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)The perfect would be to shape it on the OUTPUT chain, because I would
like
Quoted 3 lines
also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what I
want:
Quoted 6 lines
- is a good idea
- implementable
- is documented in another place than lartc.org (which is good but too much big for my simple needs)Thank you for any tips.
--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Signature · 2 lines
julien http://jve.linuxwall.info/blog
Julien:
Former Thanks for answer so fast,
what a pity htat you don't have these time to write!!!!
seems that you will not trasnlate it , but domains the subject , if you
colud sure will be so helpfull. ,
Thanks lot for have take your time to write , because the doc "talks by itself" trough the commands in the examples . but on my mind always is better get the info right from the source :-)
and unlucky for me i don't speck French, just speak spanish and got the
wrost english in the world.
Thanks aagain.
Marcos
----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "SISINT BA" <[email protected]>
Cc: "netfilter" <[email protected]>
Sent: Tuesday, April 21, 2009 11:09 AM
Subject: Re: traffic shaping documentation
Quoted 7 lines
I fear not... which's lame, I admit, but I never found the time and motivation to write in english...
A quick try on google trad gives good results though.... :)
On Tue, 21 Apr 2009 10:26:00 -0300, "SISINT BA" <[email protected]>
Quoted 13 lines · wrote:
Quoted 13 lines
I was seeing your doc in French , do you have an englsih version ???
Thanks a lot
Marcos----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "Mihamina Rakotomandimby (R12y)" <[email protected]>
Cc: <[email protected]>
Sent: Tuesday, April 21, 2009 8:18 AM
Subject: Re: traffic shaping documentation
Quoted 7 lines
Quoted 6 lines
Quoted 5 lines
Hello,
By your signature, I suppose you read french. Then, maybe you will find some useful information in the doc I wrote a few months ago :
http://wiki.linuxwall.info/doku.php?id=ressources:dossiers:advanced_networki
Quoted 61 lines
Quoted 10 lines
ng:2_qos_traffic_control
Quoted 9 lines
Hope it helps...
Julien
Quoted 2 lines · On Tue, 21 Apr 2009 11:50:05 +0300, "Mihamina Rakotomandimby (R12y)"…
Hi all,
I have a gateway on which I would like to implement traffic shappingQuoted 42 lines
Quoted 7 lines
based
Quoted 6 lines
only on ports.
The simple schema:15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> InternetThe gateway is also my workstation and it holds many services
accessibles
Quoted 34 lines
Quoted 7 lines
from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote
servers I manage are slow.Quoted 7 lines
Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)The perfect would be to shape it on the OUTPUT chain, because I would
like
Quoted 3 lines
also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what I
want:
Quoted 6 lines
- is a good idea
- implementable
- is documented in another place than lartc.org (which is good but too much big for my simple needs)Thank you for any tips.
--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Pfff.... I'm way too influenceable. Here's your translation. :)
I realize I'm posting this to a list full of QOS, firewall and network experts, so I need to warn you that there may be mistakes and misunderstanding in this document. If you find any, please let me know ;)
Julien
Quoted 8 lines · SISINT BA
Julien:
Former Thanks for answer so fast,
what a pity htat you don't have these time to write!!!!
seems that you will not trasnlate it , but domains the subject , if you
colud sure will be so helpfull. ,
Quoted 5 lines
Thanks lot for have take your time to write , because the doc "talks by itself" trough the commands in the examples . but on my mind always is better get the info right from the source :-)
and unlucky for me i don't speck French, just speak spanish and got
the
Quoted 18 lines
wrost english in the world.
Thanks aagain.Marcos
----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "SISINT BA" <[email protected]>
Cc: "netfilter" <[email protected]>
Sent: Tuesday, April 21, 2009 11:09 AM
Subject: Re: traffic shaping documentation
Quoted 30 lines
Quoted 7 lines
I fear not... which's lame, I admit, but I never found the time and motivation to write in english...
A quick try on google trad gives good results though.... :)
On Tue, 21 Apr 2009 10:26:00 -0300, "SISINT BA" <[email protected]>
Quoted 21 lines · wrote:
Quoted 20 lines
I was seeing your doc in French , do you have an englsih version ???
Thanks a lot
Marcos----- Original Message -----
From: "Julien Vehent" <[email protected]>
To: "Mihamina Rakotomandimby (R12y)" <[email protected]>
Cc: <[email protected]>
Sent: Tuesday, April 21, 2009 8:18 AM
Subject: Re: traffic shaping documentationQuoted 6 lines
Hello,
By your signature, I suppose you read french. Then, maybe you will find
some useful information in the doc I wrote a few months ago :
http://wiki.linuxwall.info/doku.php?id=ressources:dossiers:advanced_networki
Quoted 10 lines
Quoted 10 lines
Quoted 10 lines
ng:2_qos_traffic_control
Quoted 9 lines
Hope it helps...
Julien
Quoted 2 lines · On Tue, 21 Apr 2009 11:50:05 +0300, "Mihamina Rakotomandimby (R12y)"…
Hi all,
I have a gateway on which I would like to implement traffic
shapping
Quoted 22 lines
Quoted 22 lines
Quoted 22 lines
Quoted 7 lines
based
Quoted 6 lines
only on ports.
The simple schema:15-PCs-LAN <-> (eth0)[Gateway](eth1) <-> InternetThe gateway is also my workstation and it holds many services
accessibles
Quoted 14 lines
Quoted 14 lines
from the LAN and from Internet.
The problem is HTTP traffic is so much that SSH connection to the remote
servers I manage are slow.Therefore, I would like to give:
- highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22)
- normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...)
- lowest priority to HTTP
(dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)
Quoted 6 lines
Quoted 6 lines
Quoted 6 lines
Quoted 6 lines
Quoted 2 lines
The perfect would be to shape it on the OUTPUT chain, because I would
like
Quoted 3 lines
also the shape affects my (Gateway) behaviour.
I am not asking for the direct solution, I am first asking if what
I
Quoted 26 lines
Quoted 26 lines
Quoted 8 lines
Quoted 8 lines
want:
Quoted 6 lines
- is a good idea
- implementable
- is documented in another place than lartc.org (which is good but too much big for my simple needs)Thank you for any tips.
Quoted 9 lines
Quoted 9 lines
--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html--
julien
http://jve.linuxwall.info/blog
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Signature · 2 lines
julien http://jve.linuxwall.info/blog
Quoted 1 line · Mihamina Rakotomandimby (R12y) wrote:
Hi all,
Hi !
Quoted 6 lines
I have a gateway on which I would like to implement traffic shapping based only on ports.
The problem is HTTP traffic is so much that SSH connection to the remote servers I manage are slow.
Therefore, I would like to give: - highest priority to SSH (INPUT/OUTPUT/FORWARD dport 22) - normal priority to others (INPUT/OUTPUT/FORWARD dport:FTP, SVN,...) - lowest priority to HTTP (dport 80 REDIRECTed INPUT on squid's 3128, OUTPUT dport 80)
Until here no problem.
Quoted 3 lines
The perfect would be to shape it on the OUTPUT chain, because I would
like also the shape affects my (Gateway) behaviour.
That is the normal behavior and the right place where do the classification. There are also an implementation that works for incoming and it's called imq, but I never use it.
Quoted 1 line
I am not asking for the direct solution, I am first asking if what I want: - is a good idea
Why not?
Quoted 1 line
- implementable
Yes, of course.
Quoted 3 lines
- is documented in another place than lartc.org (which is good but too much big for my simple needs)
Yes. There is a lot of documentation and not a single place for "a copy and paste for start to play"
For make your setup, I give you some tips for start to work:
for make the classification, you can use:
- iptables by port (simplest)
- iptables by l7 (l7-filter.sf.net)
after match the packets, use the CLASSIFY target (simplest from my point of view), or the MARK one
OR
- tc filter for the same (classify by port/ip)
Now that you have look at the classification, it's time to prioritize, so tc it's your friend.
A lot of shape queues can help you and, by me, htb it's one of the more understandable that exists (http://luxik.cdi.cz/~devik/qos/htb/)
For a simple "copy and work" example with iptables, classify and tc I post a message on the samba ml where I show I do to it, so take a look
here: http://tinyurl.com/dmdtuz
For all the other, I'm sorry, but lartc howto it's the unique source!
Michele