Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Doing some traffic shaping here (or at least trying to)...
Done it before, but now using shorewall, as it seems like it will make config'ing a bit easier...
Got most things running, but suddenly had a thought...
I have cable internet at home, and obviously a much larger down pipe than up, so I'm really concerned with not saturating my upload, but download is fine...
I have the following (in tcrules):
3 0.0.0.0/0 0.0.0.0/0 tcp 21,22
3 0.0.0.0/0 0.0.0.0/0 tcp - 20,21
And define mark 3 in tcclasses
eth0 3 full/4 full 3 default
I obviously want to match FTP traffic and assign it to mark 3. However, I'd really like to have my upload limited (full/4), but have my download basically unlimited (maybe a different mark?). As in, if someone wants to push 2MBs to my server, let them do it, but if they want me to upload as fast as possible, tweak it back...
Anyone have any information about that?
PS: I have the following setup
Net <--> eth0 (router) eth1 <--> computers (10.0.0.xxx)
Sorry... I'm a tool... I realize you can't control how fast people are sending you stuff =P
However, another question...
Is there a way to tweak upload going out eth0 (WAN) based on internal (eth1) IP addresses?
Say I have the config from above
the router is 10.1.1.1
and there are two boxes inside (10.1.1.2, and 10.1.1.3)
Is there a way through shorewall to assign X upload (out eth0) to 10.1.1.2, and Y amount to 10.1.1.3?
Don't think source/destination on eth0 will work, because source would be my external IP, and destination the server I'm trying to upload to...
I know there is capability to mark packets in the FORWARD instead of PREROUTING chain... However, by the looks of that, that will only let me mark incomming packets (packets GOING to 10.1.1.2, not coming...)