Comments on: Ingress Policing with Linux and tc http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc Real-World Computing Experience Distilled Mon, 30 Jan 2012 20:04:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: z http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7722 z Sat, 17 Apr 2010 02:07:05 +0000 http://blog.stevedoria.net/?p=19#comment-7722 Thanks. works for me too Thanks. works for me too

]]> By: Francois http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7712 Francois Fri, 19 Mar 2010 05:33:16 +0000 http://blog.stevedoria.net/?p=19#comment-7712 I know this blog is old but it helped me out so I just wanted to add a little to it. I found that setting the bust to 10% of the rate works for me. So for example to have it limit incoming traffic to 4mbit, I set the bust to 0.4mbit: tc filter add dev bond0 parent ffff: protocol ip prio 50 \ u32 match ip src 0.0.0.0/0 police rate 4mbit \ burst .4m drop flowid :1 Thanks for posting this! I know this blog is old but it helped me out so I just wanted to add a little to it.

I found that setting the bust to 10% of the rate works for me. So for example to have it limit incoming traffic to 4mbit, I set the bust to 0.4mbit:

tc filter add dev bond0 parent ffff: protocol ip prio 50 \
u32 match ip src 0.0.0.0/0 police rate 4mbit \
burst .4m drop flowid :1

Thanks for posting this!

]]> By: Kohai http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7611 Kohai Mon, 03 Aug 2009 21:29:34 +0000 http://blog.stevedoria.net/?p=19#comment-7611 After hours of working with this thing, it turned out that I needed to increase the burst in order to get it to behave correctly. If you find that you raise the rate but the throughput kB/s doesn't go up, then increase the burst. I have mine at 50 and my kbit at 2000. I did not use the tbf line which one doc I found said it was the preferred method for doing this due to it being network friendly. The tbf line may apply to outbound traffic and the ingress to inbound traffic. After hours of working with this thing, it turned out that I needed to increase the burst in order to get it to behave correctly. If you find that you raise the rate but the throughput kB/s doesn’t go up, then increase the burst. I have mine at 50 and my kbit at 2000.

I did not use the tbf line which one doc I found said it was the preferred method for doing this due to it being network friendly. The tbf line may apply to outbound traffic and the ingress to inbound traffic.

]]> By: Greg-Muellerson http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7608 Greg-Muellerson Wed, 29 Jul 2009 21:25:25 +0000 http://blog.stevedoria.net/?p=19#comment-7608 Damn, that sound's so easy if you think about it. Damn, that sound’s so easy if you think about it.

]]> By: Steen http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7491 Steen Mon, 26 Jan 2009 13:04:31 +0000 http://blog.stevedoria.net/?p=19#comment-7491 Save the commands in an executable script, and add a link to this script in your /etc/rc.local file Save the commands in an executable script, and add a link to this script in your /etc/rc.local file

]]> By: moose http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7387 moose Wed, 10 Dec 2008 23:57:19 +0000 http://blog.stevedoria.net/?p=19#comment-7387 Thanks for this. Just one question. How can i make these settings permanent so that they will survive a reboot? Thanks for this. Just one question. How can i make these settings permanent so that they will survive a reboot?

]]> By: shaheem http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7299 shaheem Wed, 27 Aug 2008 06:09:31 +0000 http://blog.stevedoria.net/?p=19#comment-7299 thanks i'm gonna try this. how can i give each user an equal amount of BW. ive got some docs but the ones i tried really slow down the server. dunno if this is the norm. it is a mid to low level spec machine tho. thanks i’m gonna try this. how can i give each user an equal amount of BW. ive got some docs but the ones i tried really slow down the server. dunno if this is the norm. it is a mid to low level spec machine tho.

]]> By: Lucas http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7295 Lucas Fri, 22 Aug 2008 15:02:18 +0000 http://blog.stevedoria.net/?p=19#comment-7295 Hi, This don't work for me. I want to limit incoming traffic too, but in this case, the link goes slower and slower, but don't stay at specific speed. at filter, there is a "flowid :1", but, where is this class There isn't any class called ":1", right? I did read the lartc, but it's getting confused. If someone can help me, please send me an email. lucasmocellin@gmail.com Lucas. Hi,

This don’t work for me.

I want to limit incoming traffic too, but in this case, the link goes slower and slower, but don’t stay at specific speed.

at filter, there is a “flowid :1″, but, where is this class There isn’t any class called “:1″, right?

I did read the lartc, but it’s getting confused.

If someone can help me, please send me an email.

lucasmocellin@gmail.com

Lucas.

]]> By: Kenny http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7255 Kenny Fri, 09 May 2008 20:10:48 +0000 http://blog.stevedoria.net/?p=19#comment-7255 The idea is that you slow down the TCP ACKs to the local computer so that it can't eat up all the incoming bandwidth in the future (not for packets that have already arrived). So instead of a steady stream of packets coming at full speed, you get intervals of silence where the server is waiting for the previous packet to be acknowledged. In those intervals of silence things of higher priority can get a chance to come in. The idea is that you slow down the TCP ACKs to the local computer so that it can’t eat up all the incoming bandwidth in the future (not for packets that have already arrived). So instead of a steady stream of packets coming at full speed, you get intervals of silence where the server is waiting for the previous packet to be acknowledged. In those intervals of silence things of higher priority can get a chance to come in.

]]> By: MockSoul http://blog.stevedoria.net/20050906/ingress-policing-with-linux-and-tc/comment-page-1#comment-7191 MockSoul Wed, 16 Jan 2008 05:59:25 +0000 http://blog.stevedoria.net/?p=19#comment-7191 Albert, how you can 'shape' packets which are already sent? There is no way to shape incoming packets. Albert, how you can ‘shape’ packets which are already sent? There is no way to shape incoming packets.

]]>