[LARTC] How to bypass traffic control for one IP

[LARTC] How to bypass traffic control for one IP

[Yves BLUSSEAU]

[-- Attachment #1.1: Type: text/plain, Size: 707 bytes --]

Hi all,

i have a problem: i have an adsl modem that is connected to internet. I can't manage this modem.
Between my PC and the modem i have a linux firewall that make the NAT and the traffic shapping.
I have create a script that limit the bandwidth of the "external" interface of the firewall so i can manage my bandwidth for my internet application.
The problem is that i need to access the adsl modem at full bandwith (100mbits) from my PC (through the linux firewall).
So i need a configuration where all the internet IP are limited by the traffic control and where the IP of the modem is not slowdown by traffic shapping.

Who have an idea for such configuration ?

Thanks in advance.

Yves

[-- Attachment #1.2: Type: text/html, Size: 1566 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] How to bypass traffic control for one IP

[nikolay]

why would you want to "access" the adsl modem at 100Mbps?

What is the speed your ISP provides to the adsl modem?

-nik
----- Original Message ----- 
From: "Yves BLUSSEAU" <2z7mbt002@sneakemail.com>
To: <lartc@mailman.ds9a.nl>
Sent: Wednesday, August 16, 2006 6:16 PM
Subject: [LARTC] How to bypass traffic control for one IP


Hi all,

i have a problem: i have an adsl modem that is connected to internet. I 
can't manage this modem.
Between my PC and the modem i have a linux firewall that make the NAT and 
the traffic shapping.
I have create a script that limit the bandwidth of the "external" interface 
of the firewall so i can manage my bandwidth for my internet application.
The problem is that i need to access the adsl modem at full bandwith 
(100mbits) from my PC (through the linux firewall).
So i need a configuration where all the internet IP are limited by the 
traffic control and where the IP of the modem is not slowdown by traffic 
shapping.

Who have an idea for such configuration ?

Thanks in advance.

Yves


--------------------------------------------------------------------------------


> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> 

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] How to bypass traffic control for one IP

[Nikolay Kichukov]

Okay,
the following may or may not work:

on the interface of the router that is connected to the adsl add an
engress HTB qdisc.

Then add classes accordingly. The first one with highest priority will
be for the 4Mbit traffic.
The classes after this one will be dependent on your likely.

Add some tc filters. The first one will match if dst ip is $IP_OF_ADSL
or dst port is $THE_BROADCAST_PORT_OF_THE_ADSL and it will use htb class
with highest priority.

Packets not having destination the adsl will be matched in the filters
afterwords, thus shaped and so.

However, I am not sure, if all of the packets will not go under that htb
class, because in their destination header they all have the adsl IP(the
default gateway).

Maybe someone on the list will englight me on that topic.

-nik


On Fri, 2006-08-18 at 12:47 +0200, Yves BLUSSEAU wrote:
> The adsl modem has two functions: it give me access to internet (max 80ko/s 
> upload) et it is use to broadcast video stream at more than 4Mo/s.
> I can't manage the modem.
> My PC, the firewall and the modem are locally connected at 100Mbits Full 
> Duplex.
> Like I said i want to shape the upload to internet and only to internet.
> So do you know a good configuration to shape all but not the traffic 
> directly send to the modem (to it's IP) ?
> 
> Yves
> 
> ----- Original Message ----- 
> From: "Nikolay Kichukov hijacker-at-oldum.net |Linux Advanced Routing & 
> Traffic Control project/1.0-Allow|" <...>
> To: <..................>
> Sent: Friday, August 18, 2006 12:22 PM
> Subject: Re: [LARTC] How to bypass traffic control for one IP
> 
> 
> You surely do need to send the video stream at full speed, but what is
> the point of doing so if the adsl modem(router) will still shape the
> upload at the speed that your ISP gives to you?
> 
> That will only saturate the link.
> 
> -nik
> 
> On Thu, 2006-08-17 at 21:05 +0200, Yves ........ wrote:
> > Because my asl modem is also a router and it is used to send broadcast 
> > video
> > to another network and so i need to send video stream at full speed to the
> > modem.
> > ----- Original Message ----- 
> > From: "nikolay hijacker-at-oldum.net |Linux Advanced Routing & Traffic
> > Control project/1.0-Allow|" <...>
> > To: <..................>
> > Sent: Thursday, August 17, 2006 12:32 PM
> > Subject: Re: [LARTC] How to bypass traffic control for one IP
> >
> >
> > > why would you want to "access" the adsl modem at 100Mbps?
> > >
> > > What is the speed your ISP provides to the adsl modem?
> > >
> > > -nik
> > > ----- Original Message ----- 
> > > From: "Yves ........" <2z7mbt002@sneakemail.com>
> > > To: <lartc@mailman.ds9a.nl>
> > > Sent: Wednesday, August 16, 2006 6:16 PM
> > > Subject: [LARTC] How to bypass traffic control for one IP
> > >
> > >
> > > Hi all,
> > >
> > > i have a problem: i have an adsl modem that is connected to internet. I
> > > can't manage this modem.
> > > Between my PC and the modem i have a linux firewall that make the NAT 
> > > and
> > > the traffic shapping.
> > > I have create a script that limit the bandwidth of the "external"
> > > interface of the firewall so i can manage my bandwidth for my internet
> > > application.
> > > The problem is that i need to access the adsl modem at full bandwith
> > > (100mbits) from my PC (through the linux firewall).
> > > So i need a configuration where all the internet IP are limited by the
> > > traffic control and where the IP of the modem is not slowdown by traffic
> > > shapping.
> > >
> > > Who have an idea for such configuration ?
> > >
> > > Thanks in advance.
> > >
> > > Yves
> > >
> > >
> > > --------------------------------------------------------------------------------
> > >
> > >
> > >> _______________________________________________
> > >> LARTC mailing list
> > >> LARTC@mailman.ds9a.nl
> > >> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> > >>
> > >
> > >
> >
-- 
Когато сме щастливи, сме добри.
Но когато сме добри, не винаги сме щастливи...
-Оскар Уайлд

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] How to bypass traffic control for one IP

[nikolay]

sure i write an example.
it is all dependent on the ceil parameter on the class.
so if the class for the internet is 80kbps, than you will have rate 80kb 
ceil 80kb thus this class will not be able to borrow bandwith from the class 
above it.

example:

tc qdisc add dev eth1 root handle 1: htb default 11
tc class add dev eth1 parent 1: classid 1:1 htb rate 48kb ceil 48kb
tc class add dev eth1 parent 1:1 classid 1:10 htb rate 40kb ceil 40kb prio 1
tc class add dev eth1 parent 1:1 classid 1:11 htb rate 8kb ceil 8kb prio 2

What's next is to match the right packets into the right classes using 
filters.

Let me know if that helps.

btw eth1 will be the interface that is connected to the adsl router.

and 48kbps is just an example, feel free to adjust those values.

-nik
----- Original Message ----- 
From: "Yves BLUSSEAU" <2z7mbt002@sneakemail.com>
To: <hijacker@oldum.net>
Sent: Friday, August 18, 2006 5:05 PM
Subject: Re: [LARTC] How to bypass traffic control for one IP


> Thx nik,
>
> but what i don't understand is if that there no traffic to the first class 
> (4Mbit traffic) other class can borrow capacity from the first one. So the 
> traffic to internet is not limited to 80ko/s ?
> If i'm wrong, can you write an example ?
>
> Thanks in advance,
> Yves
>
> ----- Original Message ----- 
> From: "Nikolay Kichukov hijacker-at-oldum.net |Linux Advanced Routing & 
> Traffic Control project/1.0-Allow|" <...>
> To: <..................>
> Cc: <lartc@mailman.ds9a.nl>
> Sent: Friday, August 18, 2006 3:52 PM
> Subject: Re: [LARTC] How to bypass traffic control for one IP
>
>
> Okay,
> the following may or may not work:
>
> on the interface of the router that is connected to the adsl add an
> engress HTB qdisc.
>
> Then add classes accordingly. The first one with highest priority will
> be for the 4Mbit traffic.
> The classes after this one will be dependent on your likely.
>
> Add some tc filters. The first one will match if dst ip is $IP_OF_ADSL
> or dst port is $THE_BROADCAST_PORT_OF_THE_ADSL and it will use htb class
> with highest priority.
>
> Packets not having destination the adsl will be matched in the filters
> afterwords, thus shaped and so.
>
> However, I am not sure, if all of the packets will not go under that htb
> class, because in their destination header they all have the adsl IP(the
> default gateway).
>
> Maybe someone on the list will englight me on that topic.
>
> -nik
>
>
> On Fri, 2006-08-18 at 12:47 +0200, Yves ........ wrote:
>> The adsl modem has two functions: it give me access to internet (max 
>> 80ko/s
>> upload) et it is use to broadcast video stream at more than 4Mo/s.
>> I can't manage the modem.
>> My PC, the firewall and the modem are locally connected at 100Mbits Full
>> Duplex.
>> Like I said i want to shape the upload to internet and only to internet.
>> So do you know a good configuration to shape all but not the traffic
>> directly send to the modem (to it's IP) ?
>>
>> Yves
>>
>> ----- Original Message ----- 
>> From: "Nikolay Kichukov hijacker-at-oldum.net |Linux Advanced Routing &
>> Traffic Control project/1.0-Allow|" <...>
>> To: <..................>
>> Sent: Friday, August 18, 2006 12:22 PM
>> Subject: Re: [LARTC] How to bypass traffic control for one IP
>>
>>
>> You surely do need to send the video stream at full speed, but what is
>> the point of doing so if the adsl modem(router) will still shape the
>> upload at the speed that your ISP gives to you?
>>
>> That will only saturate the link.
>>
>> -nik
>>
>> On Thu, 2006-08-17 at 21:05 +0200, Yves ........ wrote:
>> > Because my asl modem is also a router and it is used to send broadcast
>> > video
>> > to another network and so i need to send video stream at full speed to 
>> > the
>> > modem.
>> > ----- Original Message ----- 
>> > From: "nikolay hijacker-at-oldum.net |Linux Advanced Routing & Traffic
>> > Control project/1.0-Allow|" <...>
>> > To: <..................>
>> > Sent: Thursday, August 17, 2006 12:32 PM
>> > Subject: Re: [LARTC] How to bypass traffic control for one IP
>> >
>> >
>> > > why would you want to "access" the adsl modem at 100Mbps?
>> > >
>> > > What is the speed your ISP provides to the adsl modem?
>> > >
>> > > -nik
>> > > ----- Original Message ----- 
>> > > From: "Yves ........" <2z7mbt002@sneakemail.com>
>> > > To: <lartc@mailman.ds9a.nl>
>> > > Sent: Wednesday, August 16, 2006 6:16 PM
>> > > Subject: [LARTC] How to bypass traffic control for one IP
>> > >
>> > >
>> > > Hi all,
>> > >
>> > > i have a problem: i have an adsl modem that is connected to internet. 
>> > > I
>> > > can't manage this modem.
>> > > Between my PC and the modem i have a linux firewall that make the NAT
>> > > and
>> > > the traffic shapping.
>> > > I have create a script that limit the bandwidth of the "external"
>> > > interface of the firewall so i can manage my bandwidth for my 
>> > > internet
>> > > application.
>> > > The problem is that i need to access the adsl modem at full bandwith
>> > > (100mbits) from my PC (through the linux firewall).
>> > > So i need a configuration where all the internet IP are limited by 
>> > > the
>> > > traffic control and where the IP of the modem is not slowdown by 
>> > > traffic
>> > > shapping.
>> > >
>> > > Who have an idea for such configuration ?
>> > >
>> > > Thanks in advance.
>> > >
>> > > Yves
>> > >
>> > >
>> > > --------------------------------------------------------------------------------
>> > >
>> > >
>> > >> _______________________________________________
>> > >> LARTC mailing list
>> > >> LARTC@mailman.ds9a.nl
>> > >> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>> > >>
>> > >
>> > >
>> >
> -- 
> Когато сме щастливи, сме добри.
> Но когато сме добри, не винаги сме щастливи...
> -Оскар Уайлд
>
>
> 

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] How to bypass traffic control for one IP

[Nikolay Kichukov]

and you do not read my example at all.

tc qdisc add dev eth1 root handle 1: htb default 1
tc class add dev eth1 parent 1: classid 1:1 htb rate 4080kb ceil 4080kb
tc class add dev eth1 parent 1:1 classid 1:10 htb rate 4000kb ceil
4000kb prio 1
tc class add dev eth1 parent 1:1 classid 1:11 htb rate 80kb ceil 80kb
prio 2

and match the packets(with filters) with destination to the adsl to
class 1:10 and all the rest to class 1:11.

I do not know if that will work, butat least you can give it a try and
then confirm if it is actually working or not working so someone else on
the list can give you another hint...

-nik


On Mon, 2006-08-21 at 09:47 +0200, Yves BLUSSEAU wrote:
> Thanks nik
> 
> BUT, i know how the class and filter work and in your example you don't take 
> my problem in account because i need an unlimited class rate (or at least 
> 4Mbits) and a limited classe rate for internet (80kb for example).
> Can you rewrite your example with this parameter ?
> 
> Thanks in advance !
> 
> Yves
> ----- Original Message ----- 
> From: "nikolay hijacker-at-oldum.net |Linux Advanced Routing & Traffic 
> Control project/1.0-Allow|" <...>
> To: <..................>
> Cc: <lartc@mailman.ds9a.nl>
> Sent: Saturday, August 19, 2006 4:21 PM
> Subject: Re: [LARTC] How to bypass traffic control for one IP
> 
> 
> sure i write an example.
> it is all dependent on the ceil parameter on the class.
> so if the class for the internet is 80kbps, than you will have rate 80kb
> ceil 80kb thus this class will not be able to borrow bandwith from the class
> above it.
> 
> example:
> 
> tc qdisc add dev eth1 root handle 1: htb default 11
> tc class add dev eth1 parent 1: classid 1:1 htb rate 48kb ceil 48kb
> tc class add dev eth1 parent 1:1 classid 1:10 htb rate 40kb ceil 40kb prio 1
> tc class add dev eth1 parent 1:1 classid 1:11 htb rate 8kb ceil 8kb prio 2
> 
> What's next is to match the right packets into the right classes using
> filters.
> 
> Let me know if that helps.
> 
> btw eth1 will be the interface that is connected to the adsl router.
> 
> and 48kbps is just an example, feel free to adjust those values.
> 
> -nik
> ----- Original Message ----- 
> From: "Yves ........" <2z7mbt002@sneakemail.com>
> To: <hijacker@oldum.net>
> Sent: Friday, August 18, 2006 5:05 PM
> Subject: Re: [LARTC] How to bypass traffic control for one IP
> 
> 
> > Thx nik,
> >
> > but what i don't understand is if that there no traffic to the first class 
> > (4Mbit traffic) other class can borrow capacity from the first one. So the 
> > traffic to internet is not limited to 80ko/s ?
> > If i'm wrong, can you write an example ?
> >
> > Thanks in advance,
> > Yves
> >
> > ----- Original Message ----- 
> > From: "Nikolay Kichukov hijacker-at-oldum.net |Linux Advanced Routing & 
> > Traffic Control project/1.0-Allow|" <...>
> > To: <..................>
> > Cc: <lartc@mailman.ds9a.nl>
> > Sent: Friday, August 18, 2006 3:52 PM
> > Subject: Re: [LARTC] How to bypass traffic control for one IP
> >
> >
> > Okay,
> > the following may or may not work:
> >
> > on the interface of the router that is connected to the adsl add an
> > engress HTB qdisc.
> >
> > Then add classes accordingly. The first one with highest priority will
> > be for the 4Mbit traffic.
> > The classes after this one will be dependent on your likely.
> >
> > Add some tc filters. The first one will match if dst ip is $IP_OF_ADSL
> > or dst port is $THE_BROADCAST_PORT_OF_THE_ADSL and it will use htb class
> > with highest priority.
> >
> > Packets not having destination the adsl will be matched in the filters
> > afterwords, thus shaped and so.
> >
> > However, I am not sure, if all of the packets will not go under that htb
> > class, because in their destination header they all have the adsl IP(the
> > default gateway).
> >
> > Maybe someone on the list will englight me on that topic.
> >
> > -nik
> >
> >
> > On Fri, 2006-08-18 at 12:47 +0200, Yves ........ wrote:
> >> The adsl modem has two functions: it give me access to internet (max 
> >> 80ko/s
> >> upload) et it is use to broadcast video stream at more than 4Mo/s.
> >> I can't manage the modem.
> >> My PC, the firewall and the modem are locally connected at 100Mbits Full
> >> Duplex.
> >> Like I said i want to shape the upload to internet and only to internet.
> >> So do you know a good configuration to shape all but not the traffic
> >> directly send to the modem (to it's IP) ?
> >>
> >> Yves
> >>
> >> ----- Original Message ----- 
> >> From: "Nikolay Kichukov hijacker-at-oldum.net |Linux Advanced Routing &
> >> Traffic Control project/1.0-Allow|" <...>
> >> To: <..................>
> >> Sent: Friday, August 18, 2006 12:22 PM
> >> Subject: Re: [LARTC] How to bypass traffic control for one IP
> >>
> >>
> >> You surely do need to send the video stream at full speed, but what is
> >> the point of doing so if the adsl modem(router) will still shape the
> >> upload at the speed that your ISP gives to you?
> >>
> >> That will only saturate the link.
> >>
> >> -nik
> >>
> >> On Thu, 2006-08-17 at 21:05 +0200, Yves ........ wrote:
> >> > Because my asl modem is also a router and it is used to send broadcast
> >> > video
> >> > to another network and so i need to send video stream at full speed to 
> >> > the
> >> > modem.
> >> > ----- Original Message ----- 
> >> > From: "nikolay hijacker-at-oldum.net |Linux Advanced Routing & Traffic
> >> > Control project/1.0-Allow|" <...>
> >> > To: <..................>
> >> > Sent: Thursday, August 17, 2006 12:32 PM
> >> > Subject: Re: [LARTC] How to bypass traffic control for one IP
> >> >
> >> >
> >> > > why would you want to "access" the adsl modem at 100Mbps?
> >> > >
> >> > > What is the speed your ISP provides to the adsl modem?
> >> > >
> >> > > -nik
> >> > > ----- Original Message ----- 
> >> > > From: "Yves ........" <2z7mbt002@sneakemail.com>
> >> > > To: <lartc@mailman.ds9a.nl>
> >> > > Sent: Wednesday, August 16, 2006 6:16 PM
> >> > > Subject: [LARTC] How to bypass traffic control for one IP
> >> > >
> >> > >
> >> > > Hi all,
> >> > >
> >> > > i have a problem: i have an adsl modem that is connected to internet. 
> >> > > I
> >> > > can't manage this modem.
> >> > > Between my PC and the modem i have a linux firewall that make the NAT
> >> > > and
> >> > > the traffic shapping.
> >> > > I have create a script that limit the bandwidth of the "external"
> >> > > interface of the firewall so i can manage my bandwidth for my 
> >> > > internet
> >> > > application.
> >> > > The problem is that i need to access the adsl modem at full bandwith
> >> > > (100mbits) from my PC (through the linux firewall).
> >> > > So i need a configuration where all the internet IP are limited by 
> >> > > the
> >> > > traffic control and where the IP of the modem is not slowdown by 
> >> > > traffic
> >> > > shapping.
> >> > >
> >> > > Who have an idea for such configuration ?
> >> > >
> >> > > Thanks in advance.
> >> > >
> >> > > Yves
> >> > >
> >> > >
> >> > > --------------------------------------------------------------------------------
> >> > >
> >> > >
> >> > >> _______________________________________________
> >> > >> LARTC mailing list
> >> > >> LARTC@mailman.ds9a.nl
> >> > >> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> >> > >>
> >> > >
> >> > >
> >> >
> > -- 
> > Когато сме щастливи, сме добри.
> > Но когато сме добри, не винаги сме щастливи...
> > -Оскар Уайлд
> >
> >
> >
> 
> 
-- 
Когато сме щастливи, сме добри.
Но когато сме добри, не винаги сме щастливи...
-Оскар Уайлд

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc