Public feed #600594

Epilog

public text v1 · immutable
Raw Edit
·published 2007-07-02 23:32 UTC
rendered paste body
root@pan-004:~# /usr/lib/qos/generate.sh all
insmod imq numdevs=1 >&- 2>&-
insmod cls_fw >&- 2>&-
insmod sch_hfsc >&- 2>&-
insmod sch_sfq >&- 2>&-
insmod sch_red >&- 2>&-
ifconfig eth0.1 up txqueuelen 5 >&- 2>&-
tc qdisc del dev eth0.1 root >&- 2>&-
tc qdisc add dev eth0.1 root handle 1: hfsc default 30
tc class add dev eth0.1 parent 1: classid 1:1 hfsc sc rate 493kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:10 hfsc rt m1 271kbit d 1584us m2 49kbit ls m1 271kbit d 1584us m2 259kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:20 hfsc rt m1 261kbit d 3961us m2 246kbit ls m1 261kbit d 3961us m2 129kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:30 hfsc ls m1 0kbit d 100000us m2 64kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:40 hfsc ls m1 0kbit d 200000us m2 12kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:50 hfsc ls m1 0kbit d 400000us m2 12kbit ul rate 493kbit
tc class add dev eth0.1 parent 1:1 classid 1:60 hfsc ls m1 0kbit d 2000000us m2 12kbit ul rate 493kbit
tc qdisc add dev eth0.1 parent 1:10 handle 100: sfq perturb 2 limit 173
tc qdisc add dev eth0.1 parent 1:20 handle 200: sfq perturb 2 limit 94
tc qdisc add dev eth0.1 parent 1:30 handle 300: red min 3155 max 6625 burst 3 avpkt 1200 limit 25240 probability 0.04 ecn
tc qdisc add dev eth0.1 parent 1:40 handle 400: red min 3155 max 6625 burst 3 avpkt 1200 limit 25240 probability 0.04 ecn
tc qdisc add dev eth0.1 parent 1:50 handle 500: red min 3155 max 6625 burst 3 avpkt 1200 limit 25240 probability 0.04 ecn
tc qdisc add dev eth0.1 parent 1:60 handle 600: red min 3155 max 6625 burst 3 avpkt 1200 limit 25240 probability 0.04 ecn
tc filter add dev eth0.1 parent 1: prio 1 protocol ip handle 1 fw flowid 1:10
tc filter add dev eth0.1 parent 1: prio 2 protocol ip handle 2 fw flowid 1:20
tc filter add dev eth0.1 parent 1: prio 3 protocol ip handle 3 fw flowid 1:30
tc filter add dev eth0.1 parent 1: prio 4 protocol ip handle 4 fw flowid 1:40
tc filter add dev eth0.1 parent 1: prio 5 protocol ip handle 5 fw flowid 1:50
tc filter add dev eth0.1 parent 1: prio 6 protocol ip handle 6 fw flowid 1:60
ifconfig imq0 up txqueuelen 5 >&- 2>&-
tc qdisc del dev imq0 root >&- 2>&-
tc qdisc add dev imq0 root handle 1: hfsc default 30
tc class add dev imq0 parent 1: classid 1:1 hfsc sc rate 8018kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:10 hfsc rt m1 1710kbit d 243us m2 801kbit ls m1 1710kbit d 243us m2 4220kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:20 hfsc rt m1 4160kbit d 243us m2 4009kbit ls m1 4160kbit d 243us m2 2110kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:30 hfsc ls m1 0kbit d 100000us m2 1055kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:40 hfsc ls m1 0kbit d 200000us m2 211kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:50 hfsc ls m1 0kbit d 400000us m2 211kbit ul rate 8018kbit
tc class add dev imq0 parent 1:1 classid 1:60 hfsc ls m1 0kbit d 2000000us m2 211kbit ul rate 8018kbit
tc qdisc add dev imq0 parent 1:10 handle 100: sfq perturb 2 limit 1128
tc qdisc add dev imq0 parent 1:20 handle 200: sfq perturb 2 limit 1539
tc qdisc add dev imq0 parent 1:30 handle 300: red min 51315 max 107761 burst 58 avpkt 1200 limit 410520 probability 0.04 ecn
tc qdisc add dev imq0 parent 1:40 handle 400: red min 51315 max 107761 burst 58 avpkt 1200 limit 410520 probability 0.04 ecn
tc qdisc add dev imq0 parent 1:50 handle 500: red min 51315 max 107761 burst 58 avpkt 1200 limit 410520 probability 0.04 ecn
tc qdisc add dev imq0 parent 1:60 handle 600: red min 51315 max 107761 burst 58 avpkt 1200 limit 410520 probability 0.04 ecn
tc filter add dev imq0 parent 1: prio 1 protocol ip handle 1 fw flowid 1:10
tc filter add dev imq0 parent 1: prio 2 protocol ip handle 2 fw flowid 1:20
tc filter add dev imq0 parent 1: prio 3 protocol ip handle 3 fw flowid 1:30
tc filter add dev imq0 parent 1: prio 4 protocol ip handle 4 fw flowid 1:40
tc filter add dev imq0 parent 1: prio 5 protocol ip handle 5 fw flowid 1:50
tc filter add dev imq0 parent 1: prio 6 protocol ip handle 6 fw flowid 1:60



iptables -t mangle -F
iptables -t mangle -X
insmod ipt_multiport >&- 2>&-
insmod ipt_CONNMARK >&- 2>&-
insmod ipt_ipp2p >&- 2>&-
insmod ipt_layer7 >&- 2>&-
insmod ipt_length >&- 2>&-
insmod ipt_connbytes >&- 2>&-
insmod ipt_IMQ >&- 2>&-
iptables -t mangle -N Default >&- 2>&-
iptables -t mangle -N Default_ct >&- 2>&-
iptables -t mangle -A Default_ct -m mark --mark 0 -m ipp2p --ipp2p -j MARK --set-mark 5
iptables -t mangle -A Default_ct -m mark --mark 0 -m layer7 --l7proto edonkey -j MARK --set-mark 5
iptables -t mangle -A Default_ct -m mark --mark 0 -m layer7 --l7proto bittorrent -j MARK --set-mark 5
iptables -t mangle -A Default_ct -m mark --mark 0 -m tcp -p tcp -m multiport --ports 22,53 -j MARK --set-mark 1
iptables -t mangle -A Default_ct -m mark --mark 0 -p udp -m udp -m multiport --ports 22,53 -j MARK --set-mark 1
iptables -t mangle -A Default_ct -m mark --mark 0 -p tcp -m tcp -m multiport --ports 20,21,25,80,110,443,993,995 -j MARK --set-mark 3
iptables -t mangle -A Default_ct -j CONNMARK --save-mark
iptables -t mangle -A Default -j CONNMARK --restore-mark
iptables -t mangle -A Default -m mark --mark 0 -j Default_ct
iptables -t mangle -A Default -m mark --mark 1 -m length --length 400: -j MARK --set-mark 0
iptables -t mangle -A Default -m mark --mark 2 -m length --length 800: -j MARK --set-mark 0
iptables -t mangle -A Default -m mark --mark 0 -p udp -m length --length :500 -j MARK --set-mark 2
iptables -t mangle -A Default -p icmp -j MARK --set-mark 1
iptables -t mangle -A Default -m mark --mark 0 -m tcp -p tcp --sport 1024:65535 --dport 1024:65535 -j MARK --set-mark 4
iptables -t mangle -A Default -m mark --mark 0 -p udp -m udp --sport 1024:65535 --dport 1024:65535 -j MARK --set-mark 4
iptables -t mangle -A Default -p tcp -m length --length :128 -m mark ! --mark 4 -m tcp --tcp-flags ALL SYN -j MARK --set-mark 1
iptables -t mangle -A Default -p tcp -m length --length :128 -m mark ! --mark 4 -m tcp --tcp-flags ALL ACK -j MARK --set-mark 1
iptables -t mangle -A Default -m connbytes --connbytes 1242880: --connbytes-dir both --connbytes-mode bytes -j MARK --set-mark 6
iptables -t mangle -A OUTPUT -o eth0.1 -j Default
iptables -t mangle -A FORWARD -o eth0.1 -j Default
iptables -t mangle -A PREROUTING -i eth0.1 -j Default
iptables -t mangle -A POSTROUTING -o eth0.1 -j Default
iptables -t mangle -A PREROUTING -i eth0.1 -j IMQ --todev 0

root@pan-004:~#