Traffic shaping with iptables

10 More Discussions You Might Find Interesting

1. Debian

Linux outbound traffic filtering with: cgroups + tc + iptables

I spent a lot of time trying to implement outbound traffic filtering with: cgroups + tc + iptables on Debian Jessie. Unfortunately there is still something wrong. The biggest issue is: - cgroups install + config - net_cls subsystem implementation - packets marking with net_cls - appropriate...

2. IP Networking

Upload problem with traffic shaping though a Linux router.

So I want to limit the download and upload speed of a specific ip adress in a local network. To do this I are using a bach script running in a linux OS (Ubuntu 11.04). The issue here is that the upload shaper does not work. I have tried an alternate solution aswell though that does not work as...

3. IP Networking

Dividing traffic with u32 iptables filter

I would like to divide traffic between two squid servers. I have been thinking about using iptables u32 filter, to check last bit of ip address which is comming to gateway. Then I would like to direct even IP adresses to one squid host, and odd to the other. Is it reasonable ? Thank you for...

4. IP Networking

Bandwidth shaping on specific port

Hi, I've been looking for a few hours now, reading various docs and man pages, but the info I found so far is either not what I was looking for or I just don't get how to do the thing I need.... So, my "problems" is that I have a server running on a specific port and I need to shape traffic...

5. Shell Programming and Scripting

Block incoming traffic FTP from internet using iptables

Hi everybody. I have the next scenary: eth0: WAN eth1: DMZ eth2: LAN I need to block all incoming trafic from the internet through my network LAN using iptables. I have squid but i need to do this using ipatbles. I have been listening about iptables -A FORDAWARD but I am stuck right...

6. IP Networking

Mac OS X IP traffic shaping question

Not sure if this considered traffic shaping or not, so I'll appreciate the enlightenment... Setup- Mac Pro, Mac OS X 10.5.6, Crashplan Pro Backup server. the Mac Pro has 2 E-net ports, en0, en1. Both E-net ports are connected to the same network, different IP's. Problem- We are planning to...

7. IP Networking

egress and ingress traffic shaping.

What exactly is the difference between ingress and egress in traffic shaping, what does it mean when we say that imq provies ingress shaping using egress qdisks?

8. IP Networking

Iptables/TC: how to make masqueraded traffic go through an openVPN tun0?

Hi all! We have a setup of three computers; Machine A (eth0) -> Machine B (eth0, hso0, tun0) -> Machine C (eth0, tun0) hso0 is the packet interface of a 3G modem, it behaves like a normal network interface. Machine B and C are connected in a VPN using openVPN (TCP). Machine A is a...

9. IP Networking

measuring traffic with iptables

i have a wireless network that is connected to internet over nat.there is ap that is connected to another ap in bridge mode, on ap is used for clients, and the other is connected to the machine that is doing masquerading. so i want to measure traffic of my clients and i thought about doing it with...

10. UNIX for Advanced & Expert Users

Traffic Shaping

I'm using FreeBSD because I like how easy the system can be set up, how software can be installed/removed and ... many other reasons:-) But there is a thing I don't know how to deal with: I have few connections behind a machine and I want to give to the machines behind a minimum guaranteed...

LEARN ABOUT DEBIAN

shaperd

shaperd(8)						      System Manager's Manual							shaperd(8)

NAME

       shaperd - traffic shaper for tcp-ip networks

SYNOPSIS

       shaperd [-h] [-v] [-c file ]

DESCRIPTION

       shaperd is a user-mode program that can shape traffic passing through a linux box. As it runs as a normal daemon process, packet forwarding
       to/from the kernel can be done by the BSD divert sockets layer (available as a patch for the linux kernel) or by the ipq packet	forwarding
       library that comes with kernel 2.4.

       The  configuration  is  made  via  a  single text file, you can force a reload by sending a SIGHUP. Logs are routed via syslog, with prior-
       ity=info, facility=daemon.

       Please note that, for the moment, you must instruct the kernel which packets to forward to shaperd.  This can be done,  for  example,  with
       the  ipchains(8)  utility under Linux 2.2, or with iptables(8) under Linux 2.4. Also, note that if a packet does not match any of the rules
       in the configuration file, it will be ignored by shaperd (but it will be logged if the log level is high enough).

OPTIONS

       -c config-file
	      Tells the daemon to get its configuration from this config-file

       -h     Summarizes command line options

       -v     Prints version information

SEE ALSO

       ipchains(8);  iptables(8);  libipq(3);  Linux's	divert	sockets  site,	http://www.anr.mcnc.org/~divert/index.shtml  ;	Netfilter's  site,
       http://netfilter.samba.org. Linux Advanced Routing & Traffic Control, http://ds9a.nl/lartc.

BUGS

       do i kill them? become their friend?
       do i eat them? raw or well done
       do i trick them? i ... i don't think they're that dumb
       do i join them? looks like that's the one
       i got bugs on my skin tickle my nausea
       i let it happen again they're always taking over
       i see they surround me i see ... see them deciding my fate
       oh that which was once was once up to me ... now it's too late
       i got bugs in my room one on one
       that's when i had a chance
       i'll just stop now i'll become naked, and with them i'll become one

AUTHOR

       Leandro Santi <lsanti@fi.uba.ar>

																	shaperd(8)

IP Networking