Forum: Pomoc w sprawdzeniu qos

Kod Pobierz kod źródłowy


#!/bin/sh

IPT="/usr/sbin/iptables"

ROUTER_IP=`nvram get wan_ipaddr`

USERS="2 3 4 5 7 8 9 10 11 12 13 14 15 16 17"



modprobe ipt_layer7

modprobe ipt_ipp2p

modprobe ipt_TOS

modprobe sch_esfq



I=br0

SFQ="sfq perturb 10"

TQA="tc qdisc add dev $I"

TCA="tc class add dev $I"

TFA="tc filter add dev $I"

NR=65





DOWNLOAD="6144"

DL_DNS_MIN="256"

DL_DNS_MAX="6144"

DL_FAST_MIN="1024"

DL_FAST_MAX="6144"

DL_ROUTER_MIN="64"

DL_ROUTER_MAX="64"

DL_P2P_MIN="128"

DL_P2P_MAX="1000"

DL_USER_MIN="311"



R_PR1="202"

R_PR2="108"



FAST_PORTS="20 21 25 80 110 143 220 443 993 995 6667 6775 8074"

L7_FAST="ftp"





$IPT -A PREROUTING -t mangle -p udp -m mport --sport 53 -j MARK --set-mark 0x10

$IPT -A PREROUTING -t mangle -p udp -m mport --sport 53 -j RETURN



TCP_FF_PORTS="22,8000,8074,5222"

$IPT -A PREROUTING -t mangle -p tcp -m mport --sport $TCP_FF_PORTS -j MARK --set-mark 0x20

$IPT -A PREROUTING -t mangle -p tcp -m mport --sport $TCP_FF_PORTS -j RETURN



for x in skypetoskype radmin; do 

$IPT -A PREROUTING -t mangle -m layer7 --l7proto $x -j MARK --set-mark 0x20

$IPT -A POSTROUTING -t mangle -m layer7 --l7proto $x -j RETURN

done



$IPT -A POSTROUTING -t mangle -s $ROUTER_IP -j MARK --set-mark 0x30

$IPT -A POSTROUTING -t mangle -s $ROUTER_IP -j RETURN



$IPT -A PREROUTING -t mangle -m ipp2p --ipp2p -j MARK --set-mark 0x40

for x in bittorrent edonkey directconnect; do

$IPT -A PREROUTING -t mangle -m layer7 --l7proto $x -j MARK --set-mark 0x40

done

$IPT -t mangle -A PREROUTING -p tcp -m ipp2p --ipp2p -j MARK --set-mark 0x40

$IPT -t mangle -A PREROUTING -p udp -m ipp2p --ipp2p -j MARK --set-mark 0x40



        tc qdisc del dev $I root 2>/dev/null

        $TQA root handle 1: htb

        $TCA parent 1: classid 1:1 htb rate ${DOWNLOAD}kbit ceil ${DOWNLOAD}kbit

# KOLEJKA DNS ICMP 256kbit

        $TCA parent 1:1 classid 1:10 htb rate ${DL_DNS_MIN}kbit ceil ${DL_DNS_MAX}kbit   prio 1 quantum 1492

        $TQA parent 1:10 handle 10: $SFQ

        $TFA parent 1: prio 10 protocol ip handle 0x10 fw flowid 1:10

# KOLEJKA FAST 1024kbit

        $TCA parent 1:1 classid 1:20 htb rate ${DL_FAST_MIN}kbit ceil ${DL_FAST_MAX}kbit   prio 2 quantum 1492

        $TQA parent 1:20 handle 20: $SFQ

        $TFA parent 1: prio 20 protocol ip handle 0x20 fw flowid 1:20

# RUCH ROUTERA 64kbit

        $TCA parent 1:1 classid 1:30 htb rate ${DL_ROUTER_MIN}kbit ceil ${DL_ROUTER_MAX}kbit   prio 3 quantum 1492

        $TQA parent 1:30 handle 30: $SFQ

        $TFA parent 1: prio 30 protocol ip handle 0x30 fw flowid 1:30

# P2P 64kbit

        $TCA parent 1:1 classid 1:40 htb rate ${DL_USER_MIN}kbit ceil ${DL_P2P_MAX}kbit   prio 8 quantum 1492

        $TQA parent 1:40 handle 40: $SFQ

        $TFA parent 1: prio 40 protocol ip handle 0x40 fw flowid 1:40

# USERZY 4672kbit / 15= 311kbit  PR1=65%=202kbit PR2=35%=108kbit

   for IP in $USERS; do

   

   for x in $L7_FAST; do 

      $IPT -A POSTROUTING -t mangle -d 192.168.1.${IP} -m layer7 --l7proto ${x} -j MARK --set-mark 0x${NR}1

      $IPT -A POSTROUTING -t mangle -d 192.168.1.${IP} -m layer7 --l7proto ${x} -j RETURN

   done

   

   if [ $IP == "8" ] then

      DL_USER_MAX="6082"

   else

      DL_USER_MAX="2000"

   fi

        $TCA parent 1:1 classid 1:${NR} htb rate ${DL_USER_MIN}kbit ceil ${DL_USER_MAX}kbit quantum 1492

      $TCA parent 1:${NR} classid 1:${NR}1 htb rate ${R_PR1}kbit ceil ${DL_USER_MAX}kbit prio 5 quantum 1492

      $TCA parent 1:${NR} classid 1:${NR}2 htb rate ${R_PR2}kbit ceil ${DL_USER_MAX}kbit prio 6 quantum 1492

        $TQA parent 1:${NR}1 handle ${NR}1: $SFQ

      $TQA parent 1:${NR}2 handle ${NR}2: $SFQ

      for z in $FAST_PORTS; do

         $TFA parent 1: prio 50 protocol ip u32 match ip dst 192.168.1.${IP} match ip protocol 6 0xff match ip sport $z 0xffff flowid 1:${NR}1

      done

         $TFA parent 1: prio 60 protocol ip u32 match ip dst 192.168.1.${IP} flowid 1:${NR}2

         NR=$(($NR+1))

   done