The tag has no wiki summary.

learn more… | top users | synonyms

25
votes
1answer
1k views

Minimal rate and default class problem for HTB

I have some doubts about a HTB structure I'm using. My aim is to limit the download and upload speed of users in a local network. Each user of the network has a personal list of domains with a down ...
24
votes
4answers
4k views

Does anyone really understand how HFSC scheduling in Linux/BSD works?

I read the original SIGCOMM '97 PostScript paper about HFSC, it is very technically, but I understand the basic concept. Instead of giving a linear service curve (as with pretty much every other ...
12
votes
2answers
901 views

Linux TC class/filter numbering

I'm currently working on a traffic shaping solution for ISP-level companies, and came to an interesting (kindof philosophical) problem. Looking about the number of endpoints the system should handle ...
10
votes
4answers
2k views

tc u32 — how to match L2 protocols in recent kernels?

I have a nice shaper, with hashed filtering, built at a linux bridge. In short, br0 connects external and internal physical interfaces, VLAN tagged packets are bridged "transparently" (I mean, no VLAN ...
10
votes
3answers
363 views

bandwidth shaping, the best approach

Let's say I have a server with a lot of external IPs, 1024+. My users are causing heavy traffic but not all of them. The ones eating all the bandwidth are few and cause the other ones to suffer from ...
10
votes
6answers
1k views

What is the best solution for traffic control in a large system (ca. 2000 users)?

following situation: We're a group of students administering the internet connection for the local resident halls, with a total of about 2000 end users. We have a traffic point system, every MB down- ...
10
votes
1answer
1k views

Sharing Bandwidth and Prioritizing Realtime Traffic via HTB, Which Scenario Works Better?

I would like to add some kind of traffic management to our Internet line. After reading a lot of documentation, I think HFSC is too complicated for me (I don't understand all the curves stuff, I'm ...
9
votes
6answers
4k views

Rate-limiting incoming traffic

I've never quite understood whether or not it's possible to rate-limit incoming traffic. I realize that there is no direct method whereby to control the remote server's rate of sending packets (unless ...
8
votes
4answers
1k views

Slow down individual connections passing through a Linux router?

We have a Linux server acting as a router/firewall for our office. Occasionally someone will upload a large file that takes up all our bandwidth. I don't want to implement any complex rules or traffic ...
7
votes
3answers
8k views

Tc: ingress policing and ifb mirroring

I'm trying to setup traffic shaping on a Linux gateway as written here. The script needs to be customized because I have multiple LAN interfaces. So to shape the LAN side I am planning to create a ifb ...
7
votes
3answers
3k views

Simulating a slow connection with tc

I have a linux box (Centos 5.5) on which I want to limit the network traffic. I have an application that we distribute to clients and I want to test it on the minimum recommended bandwidth of ...
7
votes
2answers
1k views

Why is my linux traffic shaping script having limited results?

I am trying to introduce some traffic rules to my Linux passthrough server that will give a better QoS for the following: 1) Low port traffic out of the box (web traffic and mail, etc). 2) Low port ...
6
votes
5answers
714 views

Blocking BitTorrent

How can one block, or severely slow down, BitTorrent and similar peer-to-peer (P2P) services on one's small office network? In searching Server Fault I wasn't able to find a question that served as a ...
6
votes
3answers
6k views

How can I do traffic shaping in Linux by IP?

We have a transparent proxy setup. I tried looking for traffic shaping in Linux, and all I could find online was to limit traffic by interface (eth0/eth1...). I need to limit the bandwidth (never ...
6
votes
3answers
11k views

Throttle bandwidth via iptables

I have a need to throttle the bandwidth usage, similar to how some ISPs do it, so that after a couple of seconds, it throttles down the speed.
6
votes
4answers
1k views

Packeteer Alternative [closed]

I have been tasked with starting to monitor and restrict our companies internet access. We have considered a Squid Proxy server but have decided we need something more robust then that. We would like ...
5
votes
5answers
2k views

Generate a limited amount of random network traffic between 2 hosts

I'm trying to find a utility that will allow me to generate a constant flow of random network traffic at a specified rate between 2 hosts. The utility needs to run on Windows and OSX. I've tried iperf ...
5
votes
4answers
4k views

Linux traffic shaping using TC

My internet connection goes like this: Internet <-128kbps link-> Cisco Router (Public IP) <-LAN-> Linux router/server (Public IP) <-LAN-> Regular PCs (Public IPs) The Cisco router: the ...
5
votes
1answer
397 views

What outbound HTTP throttling solutions exist?

I am looking for a way to flexibly manage outbound HTTP/HTTPS traffic in a way that respect site policies, and could be deployed at the "edge" of our datacenter network. For example, we use several ...
5
votes
2answers
805 views

Improving Skype quality

Every now and then I revisit the issue of shaping skype traffic. AFAIK Skype is notorious for ignoring most settings - incoming ports, proxies, etc so it is not possible to give special treatment to ...
4
votes
3answers
2k views

Are there simpler ways to do traffic shaping in linux besides tc?

I read lartc but I don't feel I need such a complicated solution for simple needs. One of such simple use cases is to limit a specific process' available bandwidth, upstream or downstream. How can I ...
4
votes
1answer
3k views

Using tc to delay packets to only a single IP address

I am new to using tc and netem. I want to delay packets being sent to a specific IP address. However, the commands below cause all packets on the system to be delayed, instead of just to the IP ...
4
votes
1answer
557 views

Traffic shaping: tc filter catch all filter

How Can I configure a "catch all" filter with tc filter? I tested with the following code but it gave me the error: "Unknown filter "1:100", hence option "protocol" is unparsable": tc filter add ...
4
votes
3answers
3k views

Limiting internet traffic per user/IP based on volume

I have a shared internet connection on my network which I currently manage using Smoothwall Express. I want to be able to allocate each of my housemates a certain amount of bandwidth per month. My ...
4
votes
1answer
4k views

maximum number of connections Squid

I have a Squid proxy server that controls all internet traffic for my network. I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...
4
votes
0answers
452 views

MasterShaper alternative [closed]

I'm looking for an alternative to MasterShaper, something possibly web-based which could allow me to manage QoS easily. Actually MasterShaper still looks supported, but would like to understand if ...
4
votes
2answers
491 views

Linux TC / Policy Routing tools

In addition to a really good firewall Linux has a builtin advanced routing and traffic shaping (lartc). There are many applications (firehol, firestarter, etc) to make the creation of iptables ...
3
votes
2answers
4k views

Traffic shaping HTTP downloads with l7-filter

Given the following: A small, remote office has only a few users and a 1.5 Mbps DSL connection via a ZyXEL 660R. Users experience unacceptable latency and packet loss when even one large file is ...
3
votes
2answers
1k views

TC hashing filters - single rule deletion

For traffic shaping I'm currently using a setup that looks exactly like the setup from LARTC, on this page: http://lartc.org/howto/lartc.adv-filter.hashing.html I have a simple problem with that - ...
3
votes
2answers
351 views

IP Forwarding and traffic shaping

Is there any way to forward packets from network A to network B (just like a router) without changing source IP Address (and vice versa, from network B to network A) and also enforcing traffic shaping ...
3
votes
3answers
2k views

Traffic Shaping using tc

I have a 1.5 Mbit/s link that i want to share with 150 users. My setup is the following: Linux box with 3 NICs eth0 - public ip eth1 - subnet A - 50 users (static ips) eth2 - subnet B - 100 users ...
3
votes
1answer
97 views

Bandwidth Throttling using tc qdiscs

I am trying to limit the bandwidth between a simple iperf server and client, using a third, passive machine acting as a bridge. With no interference, iperf returns a bandwidth of ~90 Mbits/sec. My ...
3
votes
2answers
167 views

Where does traffic shaping typically take place?

As part of upgrading our network infrastructure we are looking to traffic shape our bandwidth since we only have about 3Mb down / 1 Mb up. We're looking to prioritize it so that web browsing gets ...
3
votes
2answers
572 views

Determine what machine/device is consuming bandwidth

I sometimes help a small office with a few issues. About two months ago, they were complaining of poor internet performance. Long story short, I found one person running Carbonite on a Mac that was ...
3
votes
2answers
1k views

Limiting bandwidth on internal interface on Linux gateway

I am responsible for a Linux-based (it runs Debian) branch office router that takes a single high-speed Internet connection (eth2) and turns it into about 20 internal networks, each with a seperate ...
3
votes
3answers
1k views

Dynamic traffic-shaping

I have a 64MB/s internet connection and it should be divided among 17 LANs with a priority. Any computer from any LAN should have a particular share from bandwidth (For example computers from LAN1 ...
3
votes
1answer
87 views

linux tc htb bandwidth ceil being ignored and giving improper results

I'm setting up some htb packet queues like so: tc qdisc add dev eth0 root handle 10: htb tc qdisc add dev eth1 root handle 10: htb tc class add dev eth0 parent 10: classid 10:1012 htb rate 750kbps ...
3
votes
0answers
439 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
3
votes
0answers
788 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
2
votes
6answers
3k views

Rate limiting an internet connection per user

I've got a friend who has a "rent-by-room" property and includes internet access as part of this. However some tenants are somewhat hogging the internet (i.e. constantly downloading). I was ...
2
votes
3answers
178 views

How to tell if a router traffic shapes?

I have a client in a managed office, and part of that service is the provision of internet, with static IPs for all desktops provided by the building, (I know it's a recipe to have all your data ...
2
votes
3answers
3k views

Shaping outbound Traffic to Control Download Speeds with Linux

I have a situation where a server makes lots of requests from big webservers all at the same time. Currently, I have not control over the amount of requests or the rate of the requests from the ...
2
votes
2answers
383 views

Giving a priority of network traffic for one application over the other; in practice (windows)

Two applications perform network i/o concurrently. For instance, Firefox and Download Accelerator. The idea is to let serve the queue of packets of Firefox prior to serving those of Download ...
2
votes
1answer
589 views

Implementing HTB, NetEM, and TBF traffic control simultaneously

I am working on a bash utility that will use several aspects of the tc Linux command line utility to emulate various network conditions. I have successfully constructed several qdisc hierarchies, one ...
2
votes
2answers
657 views

Bridge NICs with automatic pass-through

I am looking at using a computer with a dual-NIC card (one with two NIC ports) as an in-line traffic shaper / URL filter / traffic analyzer, etc. (probably using pfSense), but I am concerned that if ...
2
votes
1answer
829 views

How to choose an open source, Asterisk friendly firewall?

I'm in pain. We are moving to a SIP based VOIP system and for whatever reason, we could not get our hosted Asterisk solution to work with our Sonicwall. Our VOIP provider gave up and is recommending ...
2
votes
1answer
547 views

Traffic shaping with tc doesn't work for high delay and bandwidth

I'm using tc with kernel 2.6.38.8 for traffic shaping. Limit bandwidth works, adding delay works, but when shaping both bandwidth with delay, the achieved bandwidth is always much lower than the limit ...
2
votes
1answer
2k views

deleting filters in tc

I have added a filter in tc as follows: tc filter add dev eth0 parent 1: protocol ip handle 6 fw flowid 1:6 This should be sending packets marked by iptables with '--set-mark 6' to class 1:6. The ...
2
votes
1answer
534 views

Can not pass traffic from privoxy to ziproxy

To save up some bandwidth I decided to set up a privoxy and ziproxy bundle on my Debian Lenny VPS. The idea was to have privoxy only accessible from localhost, and put ziproxy behind it to compress ...
2
votes
1answer
532 views

Traffic filtering for websockets

We have a websocket server that accepts connections. Unfortunately, for a reason that we have yet to identify some clients go rogue and connect/disconnect/connect... in loop at a very high frequency. ...