Forum: podział łacza 16Mbit/512Kbit

Cytat

#HTB
modprobe ipt_layer7
TCA="tc class add dev br0 parent 1:1 classid"
TFA="tc filter add dev br0 parent 1:0 prio"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
POST="iptables -t mangle -A POSTROUTING ! -s 192.168.0.0/24"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 6144kbit
$TCA 1:12 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:13 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:14 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:17 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:18 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:19 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:21 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:22 htb rate 720kbit ceil 4000kbit prio 2
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TFA 2 protocol ip handle 12 fw flowid 1:12
$TFA 2 protocol ip handle 13 fw flowid 1:13
$TFA 2 protocol ip handle 14 fw flowid 1:14
$TFA 2 protocol ip handle 17 fw flowid 1:17
$TFA 2 protocol ip handle 18 fw flowid 1:18
$TFA 2 protocol ip handle 19 fw flowid 1:19
$TFA 2 protocol ip handle 21 fw flowid 1:21
$TFA 2 protocol ip handle 22 fw flowid 1:22
$POST -d 192.168.0.2 -j MARK --set-mark 12
$POST -d 192.168.0.3 -j MARK --set-mark 13
$POST -d 192.168.0.4 -j MARK --set-mark 14
$POST -d 192.168.0.6 -j MARK --set-mark 12
$POST -d 192.168.0.7 -j MARK --set-mark 17
$POST -d 192.168.0.8 -j MARK --set-mark 18
$POST -d 192.168.0.9 -j MARK --set-mark 19
$POST -d 192.168.0.10 -j MARK --set-mark 19
$POST -d 192.168.0.11 -j MARK --set-mark 21
$POST -d 192.168.0.12 -j MARK --set-mark 22
$POST -d 192.168.0.13 -j MARK --set-mark 22
$POST -m iprange --dst-range 192.168.0.14-192.168.0.254 -j DROP

TCAU="tc class add dev imq0 parent 2:1 classid"
TFAU="tc filter add dev imq0 parent 2:0 prio"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING ! -d 192.168.0.0/24"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 2: htb
tc class add dev imq0 parent 2: classid 2:1 htb rate 512kbit
$TCAU 2:12 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:13 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:14 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:17 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:18 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:19 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:21 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:22 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:30 htb rate 28kbit ceil 80kbit prio 3 #p2p
$TQAU parent 2:12 handle 12: $SFQ
$TQAU parent 2:13 handle 13: $SFQ
$TQAU parent 2:14 handle 14: $SFQ
$TQAU parent 2:17 handle 17: $SFQ
$TQAU parent 2:18 handle 18: $SFQ
$TQAU parent 2:19 handle 19: $SFQ
$TQAU parent 2:21 handle 21: $SFQ
$TQAU parent 2:22 handle 22: $SFQ
$TQAU parent 2:30 handle 30: $SFQ
$TFAU 2 protocol ip handle 12 fw flowid 2:12
$TFAU 2 protocol ip handle 13 fw flowid 2:13
$TFAU 2 protocol ip handle 14 fw flowid 2:14
$TFAU 2 protocol ip handle 17 fw flowid 2:17
$TFAU 2 protocol ip handle 18 fw flowid 2:18
$TFAU 2 protocol ip handle 19 fw flowid 2:19
$TFAU 2 protocol ip handle 21 fw flowid 2:21
$TFAU 2 protocol ip handle 22 fw flowid 2:22
$TFAU 4 protocol ip handle 30 fw flowid 2:30
$PRE -s 192.168.0.2 -j MARK --set-mark 12
$PRE -s 192.168.0.3 -j MARK --set-mark 13
$PRE -s 192.168.0.4 -j MARK --set-mark 14
$PRE -s 192.168.0.6 -j MARK --set-mark 12
$PRE -s 192.168.0.7 -j MARK --set-mark 17
$PRE -s 192.168.0.8 -j MARK --set-mark 18
$PRE -s 192.168.0.9 -j MARK --set-mark 19
$PRE -s 192.168.0.10 -j MARK --set-mark 19
$PRE -s 192.168.0.11 -j MARK --set-mark 21
$PRE -s 192.168.0.12 -j MARK --set-mark 22
$PRE -s 192.168.0.13 -j MARK --set-mark 22
$PRE -m layer7 --l7proto bittorrent -j MARK --set-mark 30
$PRE -m layer7 --l7proto directconnect -j MARK --set-mark 30
$PRE -m layer7 --l7proto edonkey -j MARK --set-mark 30
$PRE -m layer7 --l7proto fasttrack -j MARK --set-mark 30
$PRE -m iprange --src-range 192.168.0.14-192.168.0.254 -j DROP
$PRE -j IMQ --todev 0

#HTB
modprobe ipt_layer7
TCA="tc class add dev br0 parent 1:1 classid"
TFA="tc filter add dev br0 parent 1:0 prio"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
POST="iptables -t mangle -A POSTROUTING ! -s 192.168.1.0/24"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 16000kbit
$TCA 1:12 htb rate 7000kbit ceil 15000kbit prio 2
$TCA 1:13 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:14 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:17 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:18 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:19 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:21 htb rate 1000kbit ceil 12000kbit prio 2
$TCA 1:22 htb rate 1000kbit ceil 12000kbit prio 2
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TFA 2 protocol ip handle 12 fw flowid 1:12
$TFA 2 protocol ip handle 13 fw flowid 1:13
$TFA 2 protocol ip handle 14 fw flowid 1:14
$TFA 2 protocol ip handle 17 fw flowid 1:17
$TFA 2 protocol ip handle 18 fw flowid 1:18
$TFA 2 protocol ip handle 19 fw flowid 1:19
$TFA 2 protocol ip handle 21 fw flowid 1:21
$TFA 2 protocol ip handle 22 fw flowid 1:22
$POST -d 192.168.0.2 -j MARK --set-mark 12
$POST -d 192.168.0.3 -j MARK --set-mark 13
$POST -d 192.168.0.4 -j MARK --set-mark 14
$POST -d 192.168.0.6 -j MARK --set-mark 17
$POST -d 192.168.0.7 -j MARK --set-mark 18
$POST -d 192.168.0.8 -j MARK --set-mark 19
$POST -d 192.168.0.9 -j MARK --set-mark 21
$POST -d 192.168.0.10 -j MARK --set-mark 22
$POST -m iprange --dst-range 192.168.0.11-192.168.0.254 -j DROP

TCAU="tc class add dev imq0 parent 2:1 classid"
TFAU="tc filter add dev imq0 parent 2:0 prio"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 2: htb
tc class add dev imq0 parent 2: classid 2:1 htb rate 512kbit
$TCAU 2:12 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:13 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:14 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:17 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:18 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:19 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:21 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:22 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:30 htb rate 28kbit ceil 80kbit prio 3 #p2p
$TQAU parent 2:12 handle 12: $SFQ
$TQAU parent 2:13 handle 13: $SFQ
$TQAU parent 2:14 handle 14: $SFQ
$TQAU parent 2:17 handle 17: $SFQ
$TQAU parent 2:18 handle 18: $SFQ
$TQAU parent 2:19 handle 19: $SFQ
$TQAU parent 2:21 handle 21: $SFQ
$TQAU parent 2:22 handle 22: $SFQ
$TQAU parent 2:30 handle 30: $SFQ
$TFAU 2 protocol ip handle 12 fw flowid 2:12
$TFAU 2 protocol ip handle 13 fw flowid 2:13
$TFAU 2 protocol ip handle 14 fw flowid 2:14
$TFAU 2 protocol ip handle 17 fw flowid 2:17
$TFAU 2 protocol ip handle 18 fw flowid 2:18
$TFAU 2 protocol ip handle 19 fw flowid 2:19
$TFAU 2 protocol ip handle 21 fw flowid 2:21
$TFAU 2 protocol ip handle 22 fw flowid 2:22
$TFAU 4 protocol ip handle 30 fw flowid 2:30
$PRE -s 192.168.0.2 -j MARK --set-mark 12
$PRE -s 192.168.0.3 -j MARK --set-mark 13
$PRE -s 192.168.0.4 -j MARK --set-mark 14
$PRE -s 192.168.0.6 -j MARK --set-mark 17
$PRE -s 192.168.0.7 -j MARK --set-mark 18
$PRE -s 192.168.0.8 -j MARK --set-mark 19
$PRE -s 192.168.0.9 -j MARK --set-mark 21
$PRE -s 192.168.0.10 -j MARK --set-mark 22
$PRE -m layer7 --l7proto bittorrent -j MARK --set-mark 30
$PRE -m layer7 --l7proto directconnect -j MARK --set-mark 30
$PRE -m layer7 --l7proto edonkey -j MARK --set-mark 30
$PRE -m layer7 --l7proto fasttrack -j MARK --set-mark 30
$PRE -m iprange --src-range 192.168.0.11-192.168.0.254 -j DROP
$PRE -j IMQ --todev 0