modprobe ipt_layer7

TCA="tc class add dev br0"

TFA="tc filter add dev br0"

TQA="tc qdisc add dev br0"

SFQ="sfq perturb 10"

POST="iptables -t mangle -A POSTROUTING"

tc qdisc del dev br0 root

tc qdisc add dev br0 root handle 1: htb

tc class add dev br0 parent 1: classid 1:1 htb rate 8225kbit

$TCA parent 1:1 classid 1:10 htb rate 1150kbit ceil 6792kbit prio 2

$TCA parent 1:1 classid 1:20 htb rate 256kbit ceil 512kbit prio 0 #_VOIP

$TCA parent 1:1 classid 1:30 htb rate 128kbit ceil 3200kbit prio 4 #_TOR

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:20 handle 20: $SFQ

$TQA parent 1:30 handle 30: $SFQ

$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 0 protocol ip handle 20 fw flowid 1:20

$TFA parent 1:0 prio 4 protocol ip handle 30 fw flowid 1:30

$POST ! -s 192.168.1.0/24 -m iprange --dst-range 192.168.1.8-192.168.1.16 -j MARK --set-mark 10

$POST ! -s 192.168.1.0/24 -d 192.168.1.4 -j MARK --set-mark 20 #VOIP

$POST ! -s 192.168.1.0/24 -d 192.168.1.17 -j MARK --set-mark 20 #VOIP2

$POST ! -s 192.168.1.0/24 -m iprange --dst-range 192.168.1.18-192.168.1.19 -j MARK --set-mark 10