* Re: [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
@ 2002-09-06 9:27 ` Stef Coene
2002-09-06 11:47 ` Sebastian Bleikamp
` (14 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Stef Coene @ 2002-09-06 9:27 UTC (permalink / raw)
To: lartc
On Friday 06 September 2002 10:52, Sebastian Bleikamp wrote:
> Hi !
>
> I´ve been using the wonderful wondershaper from chapter 15.8 of the
> LARTC Howto for some time. It´s really wonderful.
That's exactly why it's called the wondershaper :)
> Actually, I use the version from
> http://freshmeat.net/projects/wshaper/?topic_id=87
>
> Now I tried to put some hosts to low priority, and it doesn´t work. The
> traffic is splitted equally between the noprio and the other hosts.
> Is this because I use ip masquerading, and all the traffic seems (for
> the shaper) to come from one host ? The U32 filter and the other setup
> works correctly, because e.g. ssh traffic on port 23 always has highest
> priority.
>
> Has anybody an idea how to fix it ?
You can use an other filter : fw. This filter can use the iptables/ipchains
mark. And you can put this mark when the packets enters the LAN NIC so you
can use the ip-address of the incoming packets from your lan, mark this
packets and use the mark on the internet NIC.
> I think a nice sketch about the order of routing/postrouting and traffic
> shaping would help me.
I have one on docum.org, but it needs some updates. It's the one posted some
months ago on this list. You can find it under KPTD.
Stef
--
stef.coene@docum.org
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
2002-09-06 9:27 ` Stef Coene
@ 2002-09-06 11:47 ` Sebastian Bleikamp
2002-09-09 19:22 ` Stef Coene
` (13 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Sebastian Bleikamp @ 2002-09-06 11:47 UTC (permalink / raw)
To: lartc
Stef Coene schrieb:
> Try efsq. It's SFQ (so each "flow" gets an equal chance to send something).
> But efsq uses only dst/src addres and not dst/src address/port like sfq.
> Ideal to kill download managers because all traffic form/to the same hosts is
> considered as one stream.
> I have a link on docum.org under FAQ.
I will test it, thnx.
But another question:
I tried your solution via fwmark, and it works. At least when the router
is forwarding. I can slow down hosts on my LAN this way. If i try to
slow the gateway/router down, it fails.
I have added a mark to all outgoing traffic on ppp0, which comes from
the router, to the OUTGOING/mangle table. But it doesn´t work this way.
But from the sketch on your homepage this should work. I already checked
the IPs and devices and they are correct.
Any suggestions ? ;-)
Seb.
-=> Sebastian Bleikamp
-=> EMail: <Sebastian.Bleikamp@web.de>
-=> Phone: +49-172-6545394
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
2002-09-06 9:27 ` Stef Coene
2002-09-06 11:47 ` Sebastian Bleikamp
@ 2002-09-09 19:22 ` Stef Coene
2002-09-18 4:42 ` Justin Morea
` (12 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Stef Coene @ 2002-09-09 19:22 UTC (permalink / raw)
To: lartc
On Friday 06 September 2002 13:47, Sebastian Bleikamp wrote:
> Stef Coene schrieb:
> > Try efsq. It's SFQ (so each "flow" gets an equal chance to send
> > something). But efsq uses only dst/src addres and not dst/src
> > address/port like sfq. Ideal to kill download managers because all
> > traffic form/to the same hosts is considered as one stream.
> > I have a link on docum.org under FAQ.
>
> I will test it, thnx.
>
>
> But another question:
> I tried your solution via fwmark, and it works. At least when the router
> is forwarding. I can slow down hosts on my LAN this way. If i try to
> slow the gateway/router down, it fails.
>
> I have added a mark to all outgoing traffic on ppp0, which comes from
> the router, to the OUTGOING/mangle table. But it doesn´t work this way.
> But from the sketch on your homepage this should work. I already checked
> the IPs and devices and they are correct.
If you list the iptables/ipchains rules, you can check the counters to see if
they are incrementing.
And the sketch at my homepage is for from complete. I have to check it out
for errors.
Stef
--
stef.coene@docum.org
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (2 preceding siblings ...)
2002-09-09 19:22 ` Stef Coene
@ 2002-09-18 4:42 ` Justin Morea
2002-09-18 5:50 ` Stef Coene
` (11 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Justin Morea @ 2002-09-18 4:42 UTC (permalink / raw)
To: lartc
I think I've gotten everything up and running but I'm
not sure.
How can I tell if wondershaper is running correctly (I
just put the command /wondershaper/wshaper in my
/etc/rc.local)?
Can anyone recommend a good program to log bandwidth
usage?
Thanx
Snuffy2
__________________________________________________
Do you Yahoo!?
Yahoo! News - Today's headlines
http://news.yahoo.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (3 preceding siblings ...)
2002-09-18 4:42 ` Justin Morea
@ 2002-09-18 5:50 ` Stef Coene
2002-09-18 14:56 ` Adi Nugroho
` (10 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Stef Coene @ 2002-09-18 5:50 UTC (permalink / raw)
To: lartc
On Wednesday 18 September 2002 06:42, Justin Morea wrote:
> I think I've gotten everything up and running but I'm
> not sure.
>
> How can I tell if wondershaper is running correctly (I
> just put the command /wondershaper/wshaper in my
> /etc/rc.local)?
>
> Can anyone recommend a good program to log bandwidth
> usage?
iptraf, ethereal, ntop, a quick google search will show some more.
Stef
--
stef.coene@docum.org
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] Wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (4 preceding siblings ...)
2002-09-18 5:50 ` Stef Coene
@ 2002-09-18 14:56 ` Adi Nugroho
2002-11-20 18:58 ` [LARTC] wondershaper K Sambaiah
` (9 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Adi Nugroho @ 2002-09-18 14:56 UTC (permalink / raw)
To: lartc
On Wednesday 18 September 2002 12:42, Justin Morea wrote:
> How can I tell if wondershaper is running correctly
tc qdisc sh dev $dev
tc class sh dev $dev
tc -s -d qdisc show dev $dev
tc -s -d class show dev $dev
> Can anyone recommend a good program to log bandwidth
> usage?
I would recommend mrtg.
--
Salam,
Adi Nugroho
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (5 preceding siblings ...)
2002-09-18 14:56 ` Adi Nugroho
@ 2002-11-20 18:58 ` K Sambaiah
2002-11-20 19:09 ` Stef Coene
` (8 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: K Sambaiah @ 2002-11-20 18:58 UTC (permalink / raw)
To: lartc
Hi,
I am newbie to the list. I am using the wondershaper on RH Linux
7.3 machine. wondershaper version is 1.1a. I set it up as
upload speed xkbps and download speed y kbps. I needed to setup
total speed as x+y kbps but dynamically adjust uplink and download
speeds. Is there any way to do it.
thanks,
Sam
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (6 preceding siblings ...)
2002-11-20 18:58 ` [LARTC] wondershaper K Sambaiah
@ 2002-11-20 19:09 ` Stef Coene
2002-11-20 19:47 ` David Koski
` (7 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Stef Coene @ 2002-11-20 19:09 UTC (permalink / raw)
To: lartc
On Wednesday 20 November 2002 19:46, K Sambaiah wrote:
> Hi,
> I am newbie to the list. I am using the wondershaper on RH Linux
> 7.3 machine. wondershaper version is 1.1a. I set it up as
> upload speed xkbps and download speed y kbps. I needed to setup
> total speed as x+y kbps but dynamically adjust uplink and download
> speeds. Is there any way to do it.
You can do this with the imq device. But why ??
The imq device is a virtual device and you can redirect traffic to it with
iptables. You can do it from any interface you want and for both directions.
Stef
--
stef.coene@docum.org
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (7 preceding siblings ...)
2002-11-20 19:09 ` Stef Coene
@ 2002-11-20 19:47 ` David Koski
2002-11-24 23:16 ` Mario Ohnewald
` (6 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: David Koski @ 2002-11-20 19:47 UTC (permalink / raw)
To: lartc
On Wed, 20 Nov 2002 20:09:23 +0100
Stef Coene <stef.coene@docum.org> wrote:
> On Wednesday 20 November 2002 19:46, K Sambaiah wrote:
> > Hi,
> > I am newbie to the list. I am using the wondershaper on RH Linux
> > 7.3 machine. wondershaper version is 1.1a. I set it up as
> > upload speed xkbps and download speed y kbps. I needed to setup
> > total speed as x+y kbps but dynamically adjust uplink and download
> > speeds. Is there any way to do it.
>
> You can do this with the imq device. But why ??
Does it not make sense to allocate bandwidth without regard to direction? If bandwidth in one direction is unused, why limit the other direction?
<snip>
Regards,
David
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (8 preceding siblings ...)
2002-11-20 19:47 ` David Koski
@ 2002-11-24 23:16 ` Mario Ohnewald
2002-11-25 7:03 ` Kenneth Porter
` (5 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Mario Ohnewald @ 2002-11-24 23:16 UTC (permalink / raw)
To: lartc
Hello!
I want to give port 14567 a high priority/minumum delay because its a onlien
game.
I took wondershaper cause its fairly easy to understand. AND i read the
HowTo, especially Section 9!!
DOWNLINKx6
UPLINK\x128
DEV=ppp0
# start filters
# TOS Minimum Delay (ssh, NOT scp) in 1:10:
tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
match ip tos 0x10 0xff flowid 1:10
Then i added my ports:
-------------------------
tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
match ip dport 14567 0xffff flowid 1:10 flowid 1:10
tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
match ip dport 14567 0xffff flowid 1:10 flowid 1:10
--------------------------
I started an upload to see if it worked, but i still had a ping >1000
It didnt really change anything.
The output of wondershaper was fine, no errors came up.
Can anyone give me a hint what i did wrong?
Cheers, Mario
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (9 preceding siblings ...)
2002-11-24 23:16 ` Mario Ohnewald
@ 2002-11-25 7:03 ` Kenneth Porter
2004-02-03 2:51 ` Mark Ryan
` (4 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Kenneth Porter @ 2002-11-25 7:03 UTC (permalink / raw)
To: lartc
--On Monday, November 25, 2002 12:16 AM +0100 Mario Ohnewald
<mario.ohnewald@gmx.de> wrote:
> I started an upload to see if it worked, but i still had a ping >1000
> It didnt really change anything.
> The output of wondershaper was fine, no errors came up.
What did "wshaper status" say after the simultaneous game and upload? You
should see traffic going into the two desired queues.
What kind of upload, http or ftp? Which ports did it use? Did you put those
in the "traffic we hate" list?
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (10 preceding siblings ...)
2002-11-25 7:03 ` Kenneth Porter
@ 2004-02-03 2:51 ` Mark Ryan
2004-02-04 0:26 ` Mark Ryan
` (3 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Mark Ryan @ 2004-02-03 2:51 UTC (permalink / raw)
To: lartc
Hi,
I just installed wondershapper 1.1a on my ipcop firewall box. I have
roadrunner cable with a ftp server setup. My download speed is 2mbit (I get
225 KBytes) and my upload is 384kbit (I send at 43 KBytes).
What should the settings in wshaper?
I can ping yahoo.com at 90msec with little traffic.....and at around 220msec
with full upload traffic.
Mark
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (11 preceding siblings ...)
2004-02-03 2:51 ` Mark Ryan
@ 2004-02-04 0:26 ` Mark Ryan
2004-02-04 1:46 ` Damion de Soto
` (2 subsequent siblings)
15 siblings, 0 replies; 20+ messages in thread
From: Mark Ryan @ 2004-02-04 0:26 UTC (permalink / raw)
To: lartc
Hi,
I have wondershaper running on my firewall/router. It has 2 ethernet cards
(eth0 and eth1). Eth1 connects to a cablemodem (2mbit down, 384kbit up) and
eth0 connects to a switch. I run a ftp server on a machine connected to the
swicth.
I want to be able to keep my ftp server from affecting my browsing speed.
Problem:
I don't see any difference with wondershaper running. I have tried all
different speeds and both eth0 and eth1 in wondershaper.
Am I doing something wrong? I am testing by pinging yahoo.com.
Mark
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (12 preceding siblings ...)
2004-02-04 0:26 ` Mark Ryan
@ 2004-02-04 1:46 ` Damion de Soto
2004-02-05 1:01 ` Mark Ryan
2004-02-05 5:28 ` Damion de Soto
15 siblings, 0 replies; 20+ messages in thread
From: Damion de Soto @ 2004-02-04 1:46 UTC (permalink / raw)
To: lartc
Hi Mark,
> I have wondershaper running on my firewall/router. It has 2 ethernet cards
> (eth0 and eth1). Eth1 connects to a cablemodem (2mbit down, 384kbit up) and
> eth0 connects to a switch. I run a ftp server on a machine connected to the
> swicth.
> I want to be able to keep my ftp server from affecting my browsing speed.
>
> Problem:
> I don't see any difference with wondershaper running. I have tried all
> different speeds and both eth0 and eth1 in wondershaper.
You will want to run the wondershaper on eth1.
If you run it on eth0 it will be backwards.
You should be able to drop the speeds down to something like
DOWNLINK\x1800
UPLINK00
and see some difference.
Are you using the htb wondershaper or the old cbq one?
> Am I doing something wrong? I am testing by pinging yahoo.com.
That's probabaly not the best test, you should probably check with real
HTTP requests.
Are you trying to throttle people uploading TO your ftp server (same as you
downloads) or downloading FROM your ftp server ? (you uploading)
Regards,
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Damion de Soto - Software Engineer email: damion@snapgear.com
SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliances web: http://www.snapgear.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- Free Embedded Linux Distro at http://www.snapgear.org ---
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (13 preceding siblings ...)
2004-02-04 1:46 ` Damion de Soto
@ 2004-02-05 1:01 ` Mark Ryan
2004-02-05 5:28 ` Damion de Soto
15 siblings, 0 replies; 20+ messages in thread
From: Mark Ryan @ 2004-02-05 1:01 UTC (permalink / raw)
To: lartc
I am using wondershaper with htb to shape my network. I want to limit only
outbound ftp traffic (me uploading) from 192.168.1.101.
I am using port 21 for ftp with passive ports 50,000-60,000.
What else do I need to put in the config to do this? Here is my config.
DOWNLINK000
UPLINK40
DEV=eth1
# low priority OUTGOING traffic - you can leave this blank if you want
# low priority source netmasks
NOPRIOHOSTSRC\x192.168.1.101
# low priority destination netmasks
NOPRIOHOSTDST
# low priority source ports
NOPRIOPORTSRC
# low priority destination ports
NOPRIOPORTDST
Thanks,
Mark
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread* Re: [LARTC] wondershaper
2002-09-06 8:52 [LARTC] Wondershaper Sebastian Bleikamp
` (14 preceding siblings ...)
2004-02-05 1:01 ` Mark Ryan
@ 2004-02-05 5:28 ` Damion de Soto
15 siblings, 0 replies; 20+ messages in thread
From: Damion de Soto @ 2004-02-05 5:28 UTC (permalink / raw)
To: lartc
Mark,
> I am using wondershaper with htb to shape my network. I want to limit only
> outbound ftp traffic (me uploading) from 192.168.1.101.
>
> I am using port 21 for ftp with passive ports 50,000-60,000.
That's a large range of ports to shape, and other programs might be using them
- that's a problem with passive ftp you can't easily avoid.
> What else do I need to put in the config to do this? Here is my config.
You can't match IP and port with the normal wondershaper script.
You also can't match NATed source IP addresses on your egress qdisc, which means any
rule you setup for ports 21, 50000-60000 will apply to all machines on your LAN.
What you should probabaly do, is use iptables to mark all outbound traffic from
src 192.168.1.101 on port 21, 50000-60000 with TOS 0x08 (Maximum Throughput)
and then add another u32 filter into wondershaper
tc filter add dev $DEV parent 1:0 protocol ip prio 11 u32 match ip tos 0x08 0xff
flowid 1:30
regards
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Damion de Soto - Software Engineer email: damion@snapgear.com
SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliances web: http://www.snapgear.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- Free Embedded Linux Distro at http://www.snapgear.org ---
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 20+ messages in thread
* RE: [LARTC] wondershaper....
2005-10-13 15:19 David Sims
@ 2005-10-13 18:08 ` Eliot, Wireless and Server Administrator, Great Lakes Internet
2005-10-27 21:24 ` [LARTC] Wondershaper David Sims
1 sibling, 0 replies; 20+ messages in thread
From: Eliot, Wireless and Server Administrator, Great Lakes Internet @ 2005-10-13 18:08 UTC (permalink / raw)
To: lartc
[-- Attachment #1: Type: text/plain, Size: 206 bytes --]
--===============1432131504==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C5D021.0F61BD1F"
This is a multi-part message in MIME format.
[-- Attachment #2: Type: text/plain, Size: 7401 bytes --]
Well, the way I see it, if you are trying to load balance over two T1 lines in your own network, using multipath routing or something similar is not an issue. However, when you are trying to load balance over two T1 lines provided by seperate ISPs, you run into the "global address problem." That is, your packets going through 1 T1 go out to the world with a source IP from ISP 1 and your packets going through the other T1 go out to the world with a source IP from ISP 2. Now, on the sending end, you don't really care. But, the receiving end does care. If you are just doing a packet-per-packet load balancing, JOE webserver on the Internet is going to see half your packets coming from one IP and half coming from the other. It is not going to reassemble them into a full stream and decode them. And if you try to force your packets going out one T1 to have the IP of the other T1, the ingress filter on your ISP's network (that would be ingress from you to them, egress from them to the world) will likely filter out your packets as spoofed packets. So, the only real load balancing you can do on two T1 lines from two different ISPs is flow-based load balancing. A single connection goes through a single T1 and you load balance the seperate connections across the T1 lines. By doing it this way, you make the sacrifice that you are not receiving equal load balancing. Specifically, your upload speed on any given connection will never exceed the maximum speed of a single T1 line.
BGP comes in handy when that's not what you want to do. With BGP, you can advertise a route to your network block through both providers. Then, you can send packets out either provider with a single IP address and the packets will return via the best route from the server you are connecting to and your network. You can alter that load balancing on a network block basis by advertising some network blocks out one T1 and other network blocks out the other T1 with smaller subnet masks than your entire network block. This takes advantage of the fact that routers always route to the route with the smallest subnet mask. For instance, if you have a /20 network block, you can advertise the /20 out both providers, then advertise 8 /24's out one provider and 8 /24's out the other (or 4 /23's, or whatever you want).
If you combine BGP with equal-cost multipath routing and force the costs of the T1 lines to the same cost, you can send one packet out one T1 and one out the other giving you a maximum upload speed of 3 Mbps.
This is the only way I know of to load balance across two connections to seperate ISPs. If you have another way that solves the above listed problem, please let me know.
Now, if your T1 lines are from the same ISP, you should look into bonding them or using equal-cost multipath routing on both ends, either of which would give you 3 Mbps in both directions.
Eliot Gable
Certified Wireless Network Administrator
Cisco Certified Network Associate
CompTIA Security+ Certified
CompTIA Network+ Certified
Network and Systems Administrator
Great Lakes Internet, Inc.
112 North Howard
Croswell, MI 48422
810-679-3395
-----Original Message-----
From: David Sims [mailto:dpsims@dpsims.com]
Sent: Thu 10/13/2005 11:38 AM
To: Eliot, Wireless and Server Administrator, Great Lakes Internet
Subject: RE: [LARTC] wondershaper....
Hi Eliot,
Of course, BGP would be the traditional solution for Policy Based
Routing.... but I like doing things in new and different ways to learn
about them and to see if they are actually better or worse than the
traditional way.... (it's through that process that computer science moves
ahead ;)... It would seem at first blush that Policy Based Routing under
Linux is head and shoulders above the traditional methodologies.... and
I think the functionality is far better than even Cisco's....
I would agree that fault tolerance is not as good as with one of the
more traditional mechanisms, but think of my environment as a 'lab'...
It's easy enough to swing all the traffic to one T-1 or another in the
event of a failure... even though the volume would kill the working T-1
due to the amount of traffic... A more optimal situation would be to use
ethernet over fiber where one could just get 4 Mb/s without regard to
electical interfaces.... rather than load balancing two T-1s.... but then
there's no backup at all in that situation... it would either be working
or not working....
Any other thoughts??
Dave
**********************************************************************
On Thu, 13 Oct 2005, Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
>
> I would recommend that you investigate the possible use of BGP over
> those T1s from other providers. That would be your best solution. You
> can use BGP to shape the loading on the T1 lines and it would offer you
> better fault tolerance in the event that one of the T1 lines went down.
> Of course, you would still benefit from QoS policies on your routers.
>
> Eliot Gable
> Certified Wireless Network Administrator
> Cisco Certified Network Associate
> CompTIA Security+ Certified
> CompTIA Network+ Certified
> Network and Systems Administrator
> Great Lakes Internet, Inc.
> 112 North Howard
> Croswell, MI 48422
> 810-679-3395
>
>
>
> -----Original Message-----
> From: lartc-bounces@mailman.ds9a.nl on behalf of David Sims
> Sent: Thu 10/13/2005 11:19 AM
> To: lartc@mailman.ds9a.nl
> Subject: [LARTC] wondershaper....
>
> Hi,
>
> I am new to the Linux Advance Routing Project and to Policy Based
> Routing as implemented in Linux.... but I have been using Linux for 10
> years so not _really_ a newbie.... Looking at the lartc.org website I came
> across the reference implementation of a traffic shaper...
>
> I also have Matt Marsh's book on 'Policy Based Routing using Linux'
> which covers traffic shaping a bit in the later chapters.... but I am not
> crystal clear on it....
>
> I have a linux box doing simple policy based routing for a fairly
> substantial private network and routing the resulting traffic in a policy
> based way to two different ISPs via T-1 (1.544 Mb/s) pipes... Sort of
> arbitrary poor-boy load balancing resulting in two distinct QOSes (i.e.,
> heavily loaded and lightly loaded ;)...
>
> I would like to also experiment with traffic shaping and would welcome
> any thoughts that you might have regarding implementation in such a
> setup... Basically the PBR Linux box has two NICs.... Eth0 is facing the
> private network and is the default gateway for all private traffic...
> while eth1 is facing a DMZ LAN where the various ISPs and other private
> network services live....
>
> My first thought was to run wondershaper as is and set the parameters to
> 3 Mb up and 3 Mb down (i.e., 2 x t-1).... But then I had a flash of common
> sense and decided to ask first if there might not be a better way.... ;)
>
> If anyone has any thoughts about traffic shaping in this environment or
> on the setup in general I would love to hear them...
>
> TIA. Any and all instruction gratefully received.
>
> Dave Sims
> Houston, Texas
>
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
>
>
[-- Attachment #3: Type: text/html, Size: 8673 bytes --]
^ permalink raw reply [flat|nested] 20+ messages in thread
* [LARTC] Wondershaper....
2005-10-13 15:19 David Sims
2005-10-13 18:08 ` Eliot, Wireless and Server Administrator, Great Lakes Internet
@ 2005-10-27 21:24 ` David Sims
1 sibling, 0 replies; 20+ messages in thread
From: David Sims @ 2005-10-27 21:24 UTC (permalink / raw)
To: lartc
Hi,
I am doing LARTC style policy based routing to allocate traffic between
two different T-1 based ISPs via a single egress NIC card (two different
default routes depending on source address). I would like to try out
Wondershaper on this NIC. I have initially set:
DOWNLINK%00
UPLINK%00
DEV=eth1
with the idea being that the aggregate maximum rate out this NIC is 2 x
1544 (i.e., 2 T-1s) or about 3.1 Mb/s.... Is that an appropriate setting??
What's the best way to tell if this traffic shaping is having the desired
effect?? Is there a way to independently apply this shaper to each of
the flows?
Dave
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
^ permalink raw reply [flat|nested] 20+ messages in thread