Iptables bandwidth limit

Iptables bandwidth limit

[Daniel Cohen]

Is it possible to set a bandwidth limit with IPTABLES. Lets say for
instance that 10.1.204.49/32 should have maximum 100k speed to 10.1.10.30.

Can iptables fix this?

Iptables bandwidth limit

[Daniel Cohen]

Is it possible to set a bandwidth limit with IPTABLES. Lets say for
instance that 10.1.204.49/32 should have maximum 100k speed to 10.1.10.30.

Can iptables fix this?

Re: Iptables bandwidth limit

[Roy Sigurd Karlsbakk]

On Friday 20 September 2002 13:17, Daniel Cohen wrote:
> Is it possible to set a bandwidth limit with IPTABLES. Lets say for
> instance that 10.1.204.49/32 should have maximum 100k speed to 10.1.10.30.
>
> Can iptables fix this?

nope

but iproute2, the ip util, QoS compiled into kernel etc can do. try googling 
around for QoS howtos.

the TBF qdisc is fine for this. see 
http://snafu.freedom.org/linux2.2/iproute-notes.html#syntcqtbf

roy
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: Iptables bandwidth limit

[Eric Leblond]

On Fri, 2002-09-20 at 13:17, Daniel Cohen wrote:
> Is it possible to set a bandwidth limit with IPTABLES. Lets say for
> instance that 10.1.204.49/32 should have maximum 100k speed to 10.1.10.30.
> 
> Can iptables fix this?

You can almost do this with the limit module, but you should better use
HTB or CBQ (QOS) which are really done for this.

BR,
-- 
Éric Leblond
courriel : eleblond@init-sys.com

RE: Iptables bandwidth limit

[Rob Sterenborg]

[-- Attachment #1: Type: text/plain, Size: 235 bytes --]

> You can almost do this with the limit module, but you should 
> better use
> HTB or CBQ (QOS) which are really done for this.
> 
I first accomplished it with CBQ, but later I switched to HTB which is a lot
easier to configure.


Rob

[-- Attachment #2: Type: text/html, Size: 689 bytes --]

RE: Iptables bandwidth limit

[Andrei Ivanov]

What amazes me is that iptables doesn't know to match packets by a tos 
value other then the ones in ip.h... this really SUCKS.

On Fri, 20 Sep 2002, Rob Sterenborg wrote:

> > You can almost do this with the limit module, but you should 
> > better use
> > HTB or CBQ (QOS) which are really done for this.
> > 
> I first accomplished it with CBQ, but later I switched to HTB which is a lot
> easier to configure.
> 
> 
> Rob
> 

RE: Iptables bandwidth limit

[Oskar Andreasson]

First of all, the limitation was created since you should not use other 
TOS values than specified in the RFC's. You may get extremely strange 
problems if you start doing random TOS matches on packets. 

Anyways, iptables _is_ actually able to do irregular TOS matching with the
ftos patch applied to the kernel (I _think_ it may still be in
patch-o-matic, but I don't know for sure). It should also be available 
somewhere on the www.paktronix.com site.

Have a nice day,



On Fri, 20 Sep 2002, Andrei Ivanov wrote:

> 
> What amazes me is that iptables doesn't know to match packets by a tos 
> value other then the ones in ip.h... this really SUCKS.
> 
> On Fri, 20 Sep 2002, Rob Sterenborg wrote:
> 
> > > You can almost do this with the limit module, but you should 
> > > better use
> > > HTB or CBQ (QOS) which are really done for this.
> > > 
> > I first accomplished it with CBQ, but later I switched to HTB which is a lot
> > easier to configure.
> > 
> > 
> > Rob
> > 
> 
> 
> 

-- 
----
Oskar Andreasson
http://www.frozentux.net
http://iptables-tutorial.frozentux.net
http://ipsysctl-tutorial.frozentux.net
mailto:blueflux@koffein.net