Iptables as packet shaper

Iptables as packet shaper

[Wennie V. Lagmay]

Hi all,

Im using iptables to filter, translate IP address and forward traffic,  Im 
using squid delay_pool to limit client access per user and per network, but 
im having a limitation with the squid delay_pool. I want to have a packet 
shaper that can can allow my user to have 32 kbps during peer time and 256 
during off peek time. Delay_pool is not capable of that. Can IPTABLES do 
this kind of shaping?

Thank you very much,

wennie 

Re: Iptables as packet shaper

[Jason Opperisano]

On Sat, May 14, 2005 at 02:51:55PM +0300, Wennie V. Lagmay wrote:
> Hi all,
> 
> Im using iptables to filter, translate IP address and forward traffic,  Im 
> using squid delay_pool to limit client access per user and per network, but 
> im having a limitation with the squid delay_pool. I want to have a packet 
> shaper that can can allow my user to have 32 kbps during peer time and 256 
> during off peek time. Delay_pool is not capable of that. Can IPTABLES do 
> this kind of shaping?

no--bandwidth management is not the job of iptables, it is the job of tc
from the iproute2 package.  details are at:

  http://lartc.org/howto/lartc.qdisc.html

lartc also has their own ML:

  http://lartc.org/#mailinglist

-j

--
"Peter: Wow, is that really the blood of Christ?
 Preacher: Yes, it is.
 Peter: Holy crap, that guy must've been wasted 24 hours a day."
        --Family Guy

Re: Iptables as packet shaper

[Wennie V. Lagmay]

If  im not mistaken TC require iptroute 2. If im already using iptables for 
my routing, firewall and NAT, do I need to disable iptables for iproute2 or 
iptables and iproutes works hand in hand

thanks,

wennie

----- Original Message ----- 
From: "Jason Opperisano" <opie@817west.com>
To: <netfilter@lists.netfilter.org>
Sent: Saturday, May 14, 2005 6:39 PM
Subject: Re: Iptables as packet shaper


> On Sat, May 14, 2005 at 02:51:55PM +0300, Wennie V. Lagmay wrote:
>> Hi all,
>>
>> Im using iptables to filter, translate IP address and forward traffic, 
>> Im
>> using squid delay_pool to limit client access per user and per network, 
>> but
>> im having a limitation with the squid delay_pool. I want to have a packet
>> shaper that can can allow my user to have 32 kbps during peer time and 
>> 256
>> during off peek time. Delay_pool is not capable of that. Can IPTABLES do
>> this kind of shaping?
>
> no--bandwidth management is not the job of iptables, it is the job of tc
> from the iproute2 package.  details are at:
>
>  http://lartc.org/howto/lartc.qdisc.html
>
> lartc also has their own ML:
>
>  http://lartc.org/#mailinglist
>
> -j
>
> --
> "Peter: Wow, is that really the blood of Christ?
> Preacher: Yes, it is.
> Peter: Holy crap, that guy must've been wasted 24 hours a day."
>        --Family Guy
> 

Re: Iptables as packet shaper

[Robert Vangel]

[-- Attachment #1: Type: text/plain, Size: 369 bytes --]

Wennie V. Lagmay wrote:
> If  im not mistaken TC require iptroute 2. If im already using iptables 
> for my routing, firewall and NAT, do I need to disable iptables for 
> iproute2 or iptables and iproutes works hand in hand
> 
> thanks,
> 
> wennie
> 

In a nutshell, iptables is for filtering, iproute for routing. They 
don't clash & you use both of them together.


[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3166 bytes --]