Forum Debian Users Gang

Witam
Mam taki skrypcik do zarzadania pasmem, nie powiem sprawdza sie calkiem calkiem ale chcial bym w nim uzyc ipp2p zamias ograniczania ludzi na portach. Codzi mi o to zeby twozyc kolejke dac jej kawalek pasma a potem ladowac tam cale p2p. Mecze sie juz z tym ale nic mi nie wychodzi. Markuje ruch p2p(tak mi sie wydaje) ale nie wchodzi w kolejke ktora dla niego przeznaczam(nie ma tego w tym skrypcie)

# czyscimy wszystko
tc qdisc del dev $IF_WORLD root 2> /dev/null
tc qdisc del dev $IF_LAN   root 2> /dev/null
tc qdisc del dev $IF_WORLD ingress 2> /dev/null
tc qdisc del dev $IF_LAN   ingress 2> /dev/null

# output IF_WORLD
DEV=$IF_WORLD

echo
echo "Interfejs wychodzacy" $DEV

tc qdisc add dev $DEV root handle 1: htb default 20

tc class add dev $DEV parent 1: classid 1:1 htb rate ${UPLINK_SPEED_WORLD} burst 10k
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK_SPEED_WORLD_H} ceil ${UPLINK_SPEED_WORLD_H_MAX} burst 10k prio
1
tc class add dev $DEV parent 1:1 classid 1:20 htb rate ${UPLINK_SPEED_WORLD_M} ceil ${UPLINK_SPEED_WORLD_M_MAX} burst 10k prio
2
tc class add dev $DEV parent 1:1 classid 1:30 htb rate ${UPLINK_SPEED_WORLD_L} ceil ${UPLINK_SPEED_WORLD_L_MAX} burst 10k prio
3

tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev $DEV parent 1:20 handle 20: sfq perturb 10
tc qdisc add dev $DEV parent 1:30 handle 30: sfq perturb 10

for port in $INTERACT_PORTS
do
echo 'Ustawiam port' $port 'jako interaktywny';
tc filter add dev $DEV parent 1: protocol ip prio 1 u32 match ip sport ${port} 0xffff flowid 1:10
tc filter add dev $DEV parent 1: protocol ip prio 1 u32 match ip dport ${port} 0xffff flowid 1:10
done

echo 'Ustawiam TOS 0x10 jako interaktywny';
tc filter add dev $DEV parent 1:0 protocol ip prio 3 u32 match ip tos 0x10 0xff  flowid 1:10

echo 'Ustawiam ICMP jako interaktywny';
tc filter add dev $DEV parent 1:0 protocol ip prio 3 u32 match ip protocol 1 0xff flowid 1:10

tc filter add dev $DEV parent 1: protocol ip prio 10 u32 match ip protocol 6 0xff match u8 0x05 0x0f at 0 match u16 0x0000 0xf
fc0 at 2 match u8 0x10 0xff at 33 flowid 1:10

for port in $P2P_PORTS
do
echo 'Ustawiam port' $port 'jako p2p';
tc filter add dev $DEV parent 1: protocol ip prio 1 u32 match ip sport ${port} 0xffff flowid 1:30
tc filter add dev $DEV parent 1: protocol ip prio 1 u32 match ip dport ${port} 0xffff flowid 1:30
done

echo 'Ustawiam reszte portow jako porty masowe';

k=1
for host in $INTERACT_HOSTS
do
echo 'Ustawiam host' $host 'jako interaktywny';
tc filter add dev $DEV parent 1: protocol ip prio 10 u32 match ip dst $host flowid 1:10
done

# input IF_WORLD
echo
echo "Interfejs przychodzacy" $DEV

tc qdisc add dev $DEV handle ffff: ingress

k=1
for port in $PORT_SPEED
do
p=1;
parametry=`echo $port | sed "y/,/ /"`
for param in $parametry
do
params[$p]=$param;
((p++))
done
echo 'Ustawiam predkosc downlink dla portu' ${params[1]} 'na' ${params[2]}
tc filter add dev $DEV parent ffff: protocol ip prio 1 u32 match ip sport ${params[1]} 0xffff police rate ${params[2]} burst 1
0k drop flowid :${k}
((k++))
done

echo 'Ustawiam predkosc downlink dla reszty portow na' ${DOWNLINK_SPEED_WORLD}
tc filter add dev $DEV parent ffff: protocol ip prio 2 u32 match ip src 0.0.0.0 police rate ${DOWNLINK_SPEED_WORLD} burst 6k d
rop flowid :${k}

# output IF_LAN
DEV=$IF_LAN

echo
echo "Interfejs wychodzacy" $DEV

tc qdisc add dev $DEV root handle 2: htb default 2

echo 'Ustawiam predkosc downlink dla LAN' $LAN_IP 'na' ${DOWNLINK_SPEED_LAN}
tc class add dev $DEV parent 2: classid 2:2 htb rate ${DOWNLINK_SPEED_WORLD_ALL} burst 10k prio 1
tc class add dev $DEV parent 2: classid 2:1 htb rate ${DOWNLINK_SPEED_LAN} burst 20k prio 2

tc qdisc add dev $DEV parent 2:1 handle 3: sfq perturb 10
tc filter add dev $DEV parent 2: protocol ip prio 1 u32 match ip src ${LAN_IP} flowid 2:1
tc filter add dev $DEV parent 2: protocol ip prio 1 u32 match ip protocol 1 0xff flowid 2:1

k=2
for ip in $DOWNLINK_IP
do
p=1;
parametry=`echo $ip | sed "y/,/ /"`
for param in $parametry
do
params[$p]=$param;
((p++))
done
echo 'Ustawiam predkosc downlink dla' ${params[1]} 'na' ${params[2]}/${params[3]} 'z prio' ${params[4]};
tc class add dev $DEV parent 2:2 classid 2:${k}0 htb rate ${params[2]} burst 6k prio ${params[4]} ceil ${params[3]}
tc qdisc add dev $DEV parent 2:${k}0 handle ${k}0: sfq perturb 10
tc filter add dev $DEV parent 2: protocol ip prio 2 u32 match ip dst ${params[1]} flowid 2:${k}0
((k++))
done

# input IF_LAN
echo
echo "Interfejs przychodzacy" $DEV

tc qdisc add dev $DEV handle ffff: ingress

echo 'Ustawiam predkosc uplink dla LAN' $LAN_IP 'na' ${UPLINK_SPEED_LAN}
tc filter add dev $DEV parent ffff: protocol ip prio 1 u32 match ip dst ${LAN_IP} police rate ${UPLINK_SPEED_LAN} burst 20k dr
op flowid :1
tc filter add dev $DEV parent ffff: protocol ip prio 1 u32 match ip protocol 1 0xff police rate ${UPLINK_SPEED_LAN} burst 20k
drop flowid :1

k=2
for ip in $UPLINK_IP
do
p=1;
parametry=`echo $ip | sed "y/,/ /"`
for param in $parametry
do
params[$p]=$param;
((p++))
done
echo 'Ustawiam predkosc uplink dla' ${params[1]} 'na' ${params[2]}
tc filter add dev $DEV parent ffff: protocol ip prio 2 u32 match ip src ${params[1]} police rate ${params[2]} burst 10k drop f
lowid :${k}
((k++))

Z gory dzieki za pomoc.
Pozdrawiam