[LARTC] shaping (policing) on a bridge

[LARTC] shaping (policing) on a bridge

[Girts Folkmanis]

Hello!

First, excuse me for the dumb questions as currently I don't have much
experience in this field. I looked through all the documentation and I
haven't found an answer to my problem.

The situation is following:

I need to do shaping (or is it called policing?) on Linux on the
incoming traffic _in bridge mode_. Each "user" is shaped according to a
token bucket filter, so that the rate and bucket size can be configured.
"User" is determined by IP address, so one "user" could have several IP
addresses that all point to the same bucket. No borrowing is needed. The
solution should be CPU-friendly, as the data flow is about 100 Mbps,
maybe even more.

What combination of software should I use? Ebtables in combination with
u32 and sch_tbf?

I would be very grateful if you could give me some hints what to look at
and what documentation to read. There are different guides for
configuring shaping in IP level, but I haven't found any for bridging.

Thanks in advance!

Girts
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] shaping (policing) on a bridge

[Stef Coene]

On Wednesday 30 April 2003 13:08, Girts Folkmanis wrote:
> Hello!
>
> First, excuse me for the dumb questions as currently I don't have much
> experience in this field. I looked through all the documentation and I
> haven't found an answer to my problem.
>
> The situation is following:
>
> I need to do shaping (or is it called policing?) on Linux on the
> incoming traffic _in bridge mode_. Each "user" is shaped according to a
> token bucket filter, so that the rate and bucket size can be configured.
> "User" is determined by IP address, so one "user" could have several IP
> addresses that all point to the same bucket. No borrowing is needed. The
> solution should be CPU-friendly, as the data flow is about 100 Mbps,
> maybe even more.
>
> What combination of software should I use? Ebtables in combination with
> u32 and sch_tbf?
>
> I would be very grateful if you could give me some hints what to look at
> and what documentation to read. There are different guides for
> configuring shaping in IP level, but I haven't found any for bridging.
Policing incoming traffic can be done with the infress qdisc and u32 + 
policers.  A policer is some sort of tbf in the filter.  This is limited in 
usage.  You can only limit some traffic.

If you want to shape incoming bandwidth with htb or cbq, you need the ingress 
qdisc, or shape the outgoing traffic on the other nic.  This can be more 
complex, you can share bandwidth between users in a controlled way.

Stef


-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] shaping (policing) on a bridge

[Girts Folkmanis]

Hello!

> Policing incoming traffic can be done with the infress qdisc and u32 + 
> policers.  A policer is some sort of tbf in the filter.  This is limited in 
> usage.  You can only limit some traffic.
> 
> If you want to shape incoming bandwidth with htb or cbq, you need the ingress 
> qdisc, or shape the outgoing traffic on the other nic.  This can be more 
> complex, you can share bandwidth between users in a controlled way.

Thanks for the answer, but can you point me to what documentation to
read to do the shaping on _bridge level_? Lots of information about
shaping on IP level are around, but I have found none on the lower
level shaping.

Best regards,
Girts
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] shaping (policing) on a bridge

[Stef Coene]

On Friday 02 May 2003 11:54, Girts Folkmanis wrote:
> Hello!
>
> > Policing incoming traffic can be done with the infress qdisc and u32 +
> > policers.  A policer is some sort of tbf in the filter.  This is limited
> > in usage.  You can only limit some traffic.
> >
> > If you want to shape incoming bandwidth with htb or cbq, you need the
> > ingress qdisc, or shape the outgoing traffic on the other nic.  This can
> > be more complex, you can share bandwidth between users in a controlled
> > way.
>
> Thanks for the answer, but can you point me to what documentation to
> read to do the shaping on _bridge level_? Lots of information about
> shaping on IP level are around, but I have found none on the lower
> level shaping.
Shaping on a bridge is the same as shaping on a router.  So there is no 
special configuration needed to shape on a bridge.  The u32 can be used on a 
router and on a bridge to match the packets.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/