Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [traffic-shaping]

Traffic shaping is a technique to delay some or all datagrams to comply with desired traffic profile.

2
votes
1answer
3k views

Ingress filtering in Linux traffic control: Redirect traffic to IFB device

I have an openwrt router and I want to shape incoming traffic in order to classify all the traffic addressed to a certain IP address in my home network as low priority. For that purpose I want to ...
0
votes
1answer
988 views

linux tc: unstable rate using tbf qdisc

This is the first time I am experimenting with tc. What I am trying to achieve is to limit the download rate that passes through a Virtual Machine that acts as gateway. The VM has two Ethernet ...
0
votes
1answer
1k views

Traffic shaping L2TP/IPsec VPN (via accounts not connection)

I need to be able to control the amount of bandwidth a specific user account can use on a VPN connection. One account I want to be able to use the VPN with no restrictions and another account I want ...
3
votes
1answer
66 views

OpenVPN Traffic Control on CentOS 7

I'm trying to give my OpenVPN some bandwidth limitation. I would like for example for each user give 10Mb/s for upload and download. I tried the following answer I found (Automatically Call a Script ...
1
vote
1answer
1k views

Per-user dynamic traffic shaping

At work we have a dedicated Internet link for everyday use (servers use a different link) with limited upload bandwidth (currently 3Mbps). Since there are ~80 users, sometimes this upstream link ...
1
vote
1answer
87 views

Traffic control upload don't limit bandwidth

I'm making some rule to limit the bandwidth per ip connection on my VPN server. My command works for download but doesn't for upload, I don't know what I'm doing wrong here : #!/bin/bash TC='/usr/...
0
votes
1answer
23 views

Deleting root pfifo_fast (tc) on Linux

I'm trying to delete all qdiscs to do "fresh" configuration: % tc qdisc del dev enp0s25 root RTNETLINK answers: No such file or directory But it's there: % tc qdisc show qdisc noqueue 0: dev lo ...
5
votes
1answer
1k views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
0
votes
1answer
1k views

Is there a way to limit bandwidth per ip using HTB + a CIDR range in Linux?

I can create rules to limit a entire subnet or to limit individual ip addresses with tc and htb. I am looking to use CIDR ranges to keep things somewhat elegant. The machines in question are all ...
0
votes
0answers
21 views

Traffic Shaping with Shorewall

I'd like to shape my network traffic according to the following rules: All traffic from one specific IP has lowest priority All HTTPS traffic shall have medium priority All SSH traffic shall have ...
8
votes
3answers
3k views

Limiting interface bandwidth with tc under Linux

I have a linux router which has a 10GBe interface on the outside and bonded Gigabit ethernet interfaces on the inside. We have currently budget for 2GBit/s. If we exceed that rate by more than 5% ...
2
votes
1answer
807 views

Use traffic shaping with tc on debian jessie to limit only one virtual IP

My server has multiple IPs on which only one is mapper to the inbound physical interface eth0. Other IPs are handled in a virtual manner via iptables/DNAT. I want to limit the traffic to one of my ...
1
vote
0answers
229 views

Adding some delay to a specific port on localhost using tc and netem

I'm going to simulate a network latency on three different ports of local host by using tc (traffic control for Linux) commands. I run the following code: !/bin/bash tc qdisc add dev lo root handle 1:...
1
vote
2answers
974 views

Traffic shaping with iptables, ipset and tc (--match-set and --set-mark)

I am having some trouble with what I believe should be a fairly straightforward traffic shaping problem. I have an Ubuntu (16.04) server that is acting as a router/nat. I want to allow most users to ...
0
votes
0answers
16 views

Linking qdisc rules to an IP address

I am having trouble traffic shaping specific IP addresses using the HTB algorithm. I saw tutorials online about applying qdisc rules to specific devices and they all uses a command similar to what I ...
16
votes
3answers
23k views

Using tc to delay packets to only a single IP address

I am new to using tc and netem. I want to delay packets being sent to a specific IP address. However, the commands below cause all packets on the system to be delayed, instead of just to the IP ...
2
votes
2answers
1k views

Limit packet rate, open connections, and IP addresses

On Linux, can I use tools like tc, iptables or others to control/shape network traffic on a network interface, for the following purposes: Control the network packet number rate (or the total number)....
0
votes
2answers
71 views

Basic QoS bandwidth for all devices/clients

I have an IP network that has about 500+ clients on the network at any given time. The network uses a Cisco 1941 router as it's gateway, and has 5 different subnets. The network also has 2 DCs, a ...
0
votes
1answer
127 views

Advanced tc filtering flow map for SFQ queue

I'm trying to change the default filtering for a SFQ to one based on source IP, where each IP goes to a class. I know I can create a SFQ with more divisors with something like: tc qdisc add ... sfq ...
3
votes
2answers
2k views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
0
votes
0answers
70 views

How to use tc with HTB to rate limit docker outbound traffic?

I am trying to use tc with HTB to throttle bandwidth used by my containers in bridge network mode. To test the result, I used iperf3. without throttling, I got the following result: root@...
4
votes
0answers
537 views

How to configure per IP bandwidth control using TC?

Requirements: There is an arbitrary number of users per group. Bandwidth for any particular group is 1000kbps. Bandwidth for each user in a group is 70 kbps. At any time no user should not consume ...
1
vote
2answers
8k views

Limiting bandwidth dynamically in Squid

In fact my problem is with users who download large files from internet in my network. I have a Squid cache/proxy server in my network that is placed between my network and the Internet. I thought ...
2
votes
0answers
47 views

Linux HTB number of levels

Re-modified Linux HTB by adding a single printk message in htb_dequeue function. static struct sk_buff *htb_dequeue(struct Qdisc *sch) { ... original code ... original code for (level = 0;...
0
votes
0answers
27 views

is it possible to use imq interface for egress qos

I found examples to set imq interfaces for ingress traffic shaping but I have multiple interfaces and I want to shape all this different outgoing traffic. any link or example to set imq for egress ...
1
vote
4answers
23k views

limit network bandwith for an ip

for a traffic management app i should limit bandwidth for clients ip addresses that for each ip there are different limit how can use tc-tbf for specific ip address or is any other solution?
1
vote
0answers
134 views

How to test if packet has been tagged with classid

I'm trying to troubleshoot an issue I'm having related to IFB Mirroring which I'm attempting to deploy based on this question: Tc: ingress policing and ifb mirroring My theory is that since the ...
5
votes
2answers
113 views
0
votes
0answers
149 views

Connecting IP GRE and EoGRE tunnel in the same linux host

Is there a way to forward the payload of a GRE traffic to a different EoGRE tunnel on the same Linux host ? Host A (GRE (IP/GRE/IP)) <—> (GRE (IP/GRE/IP)) Host B (EoGRE(IP/Ethernet/GRE/IP) <...
1
vote
2answers
6k views

RTNETLINK answers: File exists when using netem with tc

So I simply get this error when I enter this command in my master VM: sudo tc qdisc add dev eth0 root netem delay 97ms RTNETLINK answers: File exists Any idea how that could be fixed? I am running ...
34
votes
4answers
10k views

Does anyone really understand how HFSC scheduling in Linux/BSD works?

I read the original SIGCOMM '97 PostScript paper about HFSC, it is very technically, but I understand the basic concept. Instead of giving a linear service curve (as with pretty much every other ...
2
votes
0answers
146 views

Limit traffic on by user OpenVPN server using tc (traffic control)

I run an OpenVPN server with a 1 Gbps bandwidth and I need to limit it to 5 Mbps per user. Searching the internet I've come up to this bash script: $U32 = "tc filter add dev tun0 protocol ip parent ...
3
votes
0answers
479 views

Limiting incoming traffic with tc police

I have a requirement to limit the total incoming traffic to 5mbit. I know this can be achieved by using the following tc command: tc filter add dev eth0 parent ffff: protocol ip u32 match u32 0 0 ...
1
vote
1answer
47 views

htb multiply root rate by 8

I am changing the queue discipline to HTB, creating a parent node, and 3 children which are the classes. sudo tc qdisc add dev em1 root handle 1: htb sudo tc qdisc add dev em1 parent 1: classid 1:1 ...
0
votes
1answer
121 views

Captive portal with local webserver and limited internet access

I have a mini pc running Linux. It has a 3G modem, wifi modem, runs nodogsplash for the captive portal, hostapd, dnsmasq, web server that gives out data that the user needs. I have the 3G device for ...
0
votes
1answer
236 views

tc qdisc with GRE in openwrt

I'm trying to implement traffic control to GRE interface in an openwrt board. For this i followed below steps, Create GRE interface named gre1 in both tunnel end devices. Tested reachability with ...
1
vote
2answers
744 views

cannot identify YouTube traffic with ndpi-netfilter, when using Google Chrome

I have ndpi-netfilter installed on Ubuntu and I need to shape the youtube traffic to 100kbps using tc module. I classify all youtube traffic to a one class through the iptables and apply tc class to ...
0
votes
1answer
354 views

HTB Traffic shaping in Linux - change quantum of a class

I am using Linux HTB to shape traffic, I am able to achieve the bellow diagram. The problem arise when I want to change the allocation for the excess bandwidth, instead of giving each class its ...
1
vote
1answer
125 views

Testing Linux HTB fall short of expectation

I am trying to test Linux HTB, doing the simplest example just to see it actually works. I am creating a root and giving it 200kbps, then I create 3 classes which each one gets assigned a portion of ...
1
vote
0answers
121 views

force tbf qdisc to drop traffic

I have several virtual netspaces on my server connected via the virtual adapters. One of the connections between the netspaces is limited to 10 Mbps: root@core-wkst:/var/log# tc -s qdisc show dev ...
0
votes
1answer
326 views

Bandwidth shaping for an ipset using qdisc and tc

I am trying to do bandwidth control for an ipset using these tutorials 1,3,21. And this script. I have modified it to get ipsetnames. This is my bandwithshaing script. TC=/sbin/tc IF=wlan0 ...
0
votes
1answer
53 views

Split ping RoundTripTime

Data obtained from ping: is it round trip or one way? shows that the data of a ping measures both directions together. Is there any way to split this information in time-to-destination and time-back?
1
vote
1answer
488 views

How to set an general network limit per client + priority for TCP acknowledgements

Following situation: Network A is connected to network B over an slow connection. Different hosts in network A would like to send traffic to hosts in network B. Hosts in network B sending commands to ...
3
votes
2answers
2k views

Linux tc Traffic Shaping for IPv6

I have traffic shaping with tc and htb in place and everything works fine for IPv4. Now I want to limit the bandwidth for incoming IPv6 ssh/sftp traffic to some reasonable amount, so it doesn't ...
0
votes
1answer
526 views

Linux traffic shaping for large bandwidth (more than 1Gig)

I am doing an experiment between three computers that are connected with 10Gig interfaces and have RTT of 100 microseconds. Let's say these are machines A, B, and C. Machine A is communicating with B ...
0
votes
1answer
426 views

Limit download speed to single LAN IP using TC on router's WAN interface

Currently I police the rate on my download speed with tc filter add dev ppp0 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 9900kbit burst 10k drop flowid :1 I've got one ...
2
votes
1answer
535 views

tc police rate packets by iptables handle?

I want to limit download speed from any IP to 800kbit, (this works) And I want to limit the download speed of marked packets to 400kbit. I don't get any errors, but it's not limiting the download ...
1
vote
1answer
391 views

shape dropbox on linux router with tc and iptables

Another machine on my LAN is uploading to Dropbox and saturating my internet connection's upload bandwidth. When that happens my pings to 8.8.8.8 take 3000-6000ms. When dropbox is not uploading my ...
0
votes
1answer
1k views

How to set 1Mb speed per host in pfsense

Currently we are using pfsense latest version and I want to assign download speed upto 1Mbps per host (download+Upload) using pfsense and also setup squid proxy which working on bridgh mode in pfsense ...
4
votes
1answer
170 views

Inject Delay between Virtual Machines in a VLAN

We'd like to simulate the impact of locality using VMs within a on a public cloud (say AWS EC2). To do this, we would like to inject delays in packets such that we can simulate a particular network ...