mark connections based a quote

mark connections based a quote

[Gabor Csuri]

Hi All,

 I need to restrict some connections into a bandwidth on my local network.
The long downloads (and uploads) are very bad for our 800k/128k bandwidth.
I thougth I would restrict the long downloads into a lower bandwidth, but I
don't know how can I mark the long downloads.
Can I mark the packets which are a part of a long connection maybe like
this:
iptables -m cquote --cquote 2000000 -j MARK --set-mark 1
means it marks packet within a connection which are over 2MB.

How can I do this?

Thanks in advice, Gabor Csuri.

Re: mark connections based a quote

[John Leach]

[-- Attachment #1: Type: text/plain, Size: 1169 bytes --]

Hi Gabor,

This is probably best achieved with some of Linux's advancing routing
and queuing features rather than with Netfilter.

You should be able to setup a simple token bucket queue to allow full
traffic speeds for a burst of 2MB and then lower the rate to whatever
you like.

see the Advanced routing HOWTO at
http://www.tldp.org/HOWTO/Adv-Routing-HOWTO/index.html

specifically the Queuing disciplines section
http://www.tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.qdisc.html

It's all rather impressive.

John.

On Thu, 2002-11-14 at 22:01, Gabor Csuri wrote:
> Hi All,
> 
>  I need to restrict some connections into a bandwidth on my local network.
> The long downloads (and uploads) are very bad for our 800k/128k bandwidth.
> I thougth I would restrict the long downloads into a lower bandwidth, but I
> don't know how can I mark the long downloads.
> Can I mark the packets which are a part of a long connection maybe like
> this:
> iptables -m cquote --cquote 2000000 -j MARK --set-mark 1
> means it marks packet within a connection which are over 2MB.
> 
> How can I do this?
> 
> Thanks in advice, Gabor Csuri.
> 
> 
> 


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

RE: mark connections based a quote

[Rob Sterenborg]

>  I need to restrict some connections into a bandwidth on my
> local network.
> The long downloads (and uploads) are very bad for our
> 800k/128k bandwidth.
> I thougth I would restrict the long downloads into a lower
> bandwidth, but I
> don't know how can I mark the long downloads.
> Can I mark the packets which are a part of a long connection

I don't think netfilter/iptables can do what you want, but CBQ or HTB
together with iproute2 can.
In case of HTB (which I think is easier to configure), check out :
http:luxik.cdi.cz/~devik/qos/htb/

Specifically, for bursts (short downloads at high speed) :
http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#burst
You can allow higher bandwidth for short downloads, while larger will be
throttled.


Rob

RE: mark connections based a quote

[Gabor Csuri]

Hi All,

 Thank you the answers, I got the solution in private mail.
There is an iptables patch exactly do what I wanted.

Connbytes patch is located at http://luxik.cdi.cz/~devik/connbytes/.

regards, Gabor.

> -----Original Message-----
> From: Rob Sterenborg [mailto:rsterenborg@xs4all.nl]
> Sent: Friday, November 15, 2002 2:44 PM
> To: 'Gabor Csuri'; netfilter@lists.netfilter.org
> Subject: RE: mark connections based a quote
> 
> 
> >  I need to restrict some connections into a bandwidth on my
> > local network.
> > The long downloads (and uploads) are very bad for our
> > 800k/128k bandwidth.
> > I thougth I would restrict the long downloads into a lower
> > bandwidth, but I
> > don't know how can I mark the long downloads.
> > Can I mark the packets which are a part of a long connection
> 
> I don't think netfilter/iptables can do what you want, but CBQ or HTB
> together with iproute2 can.
> In case of HTB (which I think is easier to configure), check out :
> http:luxik.cdi.cz/~devik/qos/htb/
> 
> Specifically, for bursts (short downloads at high speed) :
> http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#burst
> You can allow higher bandwidth for short downloads, while larger will be
> throttled.
> 
> 
> Rob

mark connections based a quote

[Gabor Csuri]

Hi All,

 I need to restrict some connections into a bandwidth on my local network.
The long downloads (and uploads) are very bad for our 800k/128k bandwidth.
I thougth I would restrict the long downloads into a lower bandwidth, but I
don't know how can I mark the long downloads.
Can I mark the packets which are a part of a long connection maybe like
this:
iptables -m cquote --cquote 2000000 -j MARK --set-mark 1
means it marks packet within a connection which are over 2MB.

How can I do this?

Thanks in advice, Gabor Csuri.