linux user group brescia

Ciao
abbiamo un server che fa natting e ho deciso di implementare
il traffic control per ripartire la banda in upload, molto preziosa
con le adsl :-(

ho dei problemini con il traffic control, tutto il traffico viene
messo in una coda, come se iptables non marcasse
correttamente i pacchetti.

Sapete come fare a sapere quali pacchetti sono realmente
marcati e quali no? In modo da capire dove sta il problema..
Grazie in anticipo..

Ecco i file di conf:

iptables:

-A OUTPUT  -p tcp -m multiport --ports 4000:5999,6001:7000 -j MARK 
--set-mark 0x3
-A OUTPUT  -p tcp -m multiport --ports 80,21 -j MARK --set-mark 0x4
-A OUTPUT  -p tcp -m multiport --ports 6000,22 -j MARK --set-mark 0x5

tc
#!/bin/bash
tc qdisc del dev eth1 root
tc qdisc add dev eth1 root handle 1: htb default 10
tc class add dev eth1 parent 1: classid 1:1 htb rate 450kbit burst 6k
tc class add dev eth1 parent 1:1 classid 1:10 htb rate 240kbit burst 6k 
prio 3
tc class add dev eth1 parent 1:1 classid 1:20 htb rate 240kbit burst 6k 
prio 2
tc class add dev eth1 parent 1:1 classid 1:30 htb rate 100kbit burst 6k 
prio 1
tc qdisc add dev eth1 parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev eth1 parent 1:20 handle 20: sfq perturb 10
tc qdisc add dev eth1 parent 1:30 handle 30: sfq perturb 10

# handle 5 : high prio
tc filter add dev eth1 protocol ip parent 1:0 handle 5 fw flowid 1:10
# traffico web
tc filter add dev eth1 protocol ip parent 1:0 handle 4 fw flowid 1:20
# handle 2 : porte da 4000 a 5000
tc filter add dev eth1 protocol ip parent 1:0 handle 3 fw flowid 1:30
# server web in uscita
tc filter add dev eth1 parent 1: protocol ip u32 match ip sport 80 
0xffff flowid 1:20
tc filter add dev eth1 parent 1: protocol ip u32 match ip sport 8888 
0xffff flowid 1:20

diagnostica....

brainld ~ # tc -s qdisc show
qdisc pfifo_fast 0: dev eth0 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 
1 1 1
 Sent 13128150235 bytes 24501581 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
qdisc htb 1: dev eth1 r2q 10 default 10 direct_packets_stat 1
 Sent 3907566 bytes 9978 pkt (dropped 10, overlimits 11920 requeues 0)
 rate 0bit 0pps backlog 0b 108p requeues 0
qdisc sfq 10: dev eth1 parent 1:10
 Sent 3906877 bytes 9969 pkt (dropped 10, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 108p requeues 0
qdisc sfq 20: dev eth1 parent 1:20
 Sent 561 bytes 7 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
qdisc sfq 30: dev eth1 parent 1:30
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0



Pedro