SuSE 9.2 router

danny2055 · 04-24-2005, 04:33 PM

Hi,
I have recently put together a low end PC to act as a home router and have configured masquerading so all the machines on the network get their IP from the DHCP server on the router, and their internet access is masqueraded through the router also.

what i'd like to do is set the priority on packets so counterstrike packets (UDP ports 27000 to 27015) are given top priority and get sent out / received first and after that everything else, ive also attempted to do this with SSH

I've written the following rules after doing a bit of research however after testing it by using azureus (bittorrent client) to download at 60k/sec and upload at 20k/sec (4mbit line) and play counterstrike at the same time, i still get pretty bad pings, is there anyway to make counterstrike and any other ports completely interactive/not interefered by anything else?

I suspect maybe I am applying the mangling in the wrong table (I dont fully understand all the concepts - a link to a n00b friendly routing/iptables/mangling tutorial would be great if any of you guys have any)

Any help or pointer in the right direction would be much appreciated!

Code:

#1.1 SET INCOMING BITTORRENT PACKETS THAT HAVENT BEEN ROUTED YET TO MAXIMIZE THOROUGHPUT [todo]


#2.1 SET INCOMING SSH/TELNET PACKETS THAT HAVENT BEEN ROUTED YET TO MINIMIZE DELAY TO COUNTER LAG
iptables -A PREROUTING -t mangle -p tcp --sport 22 -j TOS --set-tos Minimize-Delay

#2.2 SET INCOMING COUNTERSTRIKE PACKETS THAT HAVENT BEEN ROUTED YET TO MINIMIZE DELAY TO COUNTER LAG
iptables -A PREROUTING -t mangle -p udp --sport 27000:27015 -j TOS --set-tos Minimize-Delay

danny2055 · 04-25-2005, 04:12 AM

any ideas? (bump :P)

frostschutz · 05-04-2005, 03:33 PM

Setting the TOS alone won't help much. You need to set up some queuing disciplines which make use of that information (for example, you could try PRIO qdisc as default scheduler). If you want more information about Linux QoS, start with http://www.lartc.org . For detecting P2P traffic, you might also want to check out IPP2P http://www.ipp2p.org - it requires some patching to make it work, though.

For a single user scenario, you might want to try some configuration scripts that other people wrote, for example Wondershaper (not a very sophisticated script, but a simple HTB setup alone can do wonders). You can use Google to find many other traffic shaping scripts on the net.