Re: mark connections based a quote

[John Leach <john@ecsc.co.uk>]

[-- Attachment #1: Type: text/plain, Size: 1169 bytes --]

Hi Gabor,

This is probably best achieved with some of Linux's advancing routing
and queuing features rather than with Netfilter.

You should be able to setup a simple token bucket queue to allow full
traffic speeds for a burst of 2MB and then lower the rate to whatever
you like.

see the Advanced routing HOWTO at
http://www.tldp.org/HOWTO/Adv-Routing-HOWTO/index.html

specifically the Queuing disciplines section
http://www.tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.qdisc.html

It's all rather impressive.

John.

On Thu, 2002-11-14 at 22:01, Gabor Csuri wrote:
> Hi All,
> 
>  I need to restrict some connections into a bandwidth on my local network.
> The long downloads (and uploads) are very bad for our 800k/128k bandwidth.
> I thougth I would restrict the long downloads into a lower bandwidth, but I
> don't know how can I mark the long downloads.
> Can I mark the packets which are a part of a long connection maybe like
> this:
> iptables -m cquote --cquote 2000000 -j MARK --set-mark 1
> means it marks packet within a connection which are over 2MB.
> 
> How can I do this?
> 
> Thanks in advice, Gabor Csuri.
> 
> 
> 


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]