IP Networking

that's some good thinking!

another question.. how can I track connection time?
yet another.. can I track connection since it gets into --state-NEW till end of transfer?

If it could be possible, then I can use -m --string "upload" in front of it and capture whole connection to some filter or something.

It's nice thinking about filename/content-type ... I can use L7 Filter to capture .avi files ... but thing is.. that I can only do it for both upload/download ... not one in particular?

Corona688 - no, not any caching... I have two servers that control about 300 users accessing internet. and If only one is uploading some file, then everything get's slow.

Why not limit upload speed then? Limiting upload speed some (not draconically) may improve their experience a lot by not letting uploads hog the entire connection. I know with our ISP, we get 1 megabit down, 100kilobit up, but not at the same time so uploads clog our connection badly. Limiting uploads to 70kilobit helps significantly.

I did that.. my upload is at 80% cause of QOS and my ACK-s have priority... I can utilize 100% download and 100% upload at same time.. thing is, packets get delayed when upload is at 100% ... no matter what - that lag just keeps coming back.

I came here if someone knows thing or two about advanced QOS in combination with iptables and perhaps L7 filter... or just to get new idea on how to do things.

Straight forward question is -- how can I throttle upload speed to (say) .upload.youtube.com ... How can I detect that kind of connection .. basically I need some innovative idea ... I have none.. or none of my work...


I had one idea while back.. and that is to use counters and calculate how much upload did user do in say one minute.. if that sum is grater than it should be. then user should be throttled by QOS. With --string "upload" I can perhaps initiate counters and script that would harvest those counters?

So if anyone knows how I might do that... hm.. iptraf? I've searched everywhere.. simple script/program like this for linux which is extra useful simply don't exist...