Hi folks.

Today I was just trying to test tc filters with cbq.
But it was not working..I don't know may be I am making some mistake.Please someone correct me.

Here is what I have done.
I have linux kernel 2.4.2-2 on which I am running ipchains 1.3.10 with iproute2-ss000305.

Now my network is something like this.

[ INTERNET ]------[eth0]=====[eth1]-----[ Private LAN ]

eth0 = 202.142.x.x
eth1 = 192.168.2.1
LAN = 192.168.2.0/24


I am doing masquerading for my internal network.

Now I have 1 PC on my internal network 192.168.2.100
for that I want to restrict on 5Kbps download speed.I have total bandwidth of 128Kbps.
Now following are the commands I have tested.



# ipchains -I forward -s 192.168.2.0/24 -j MASQ
# tc qdisc add dev eth1 root handle 1: cbq bandwidth 128Kbit avpkt 1000 mpu 64
# tc class add dev eth1 parent 1:0 classid 1:1 cbq bandwidth 128Kbit rate 5Kbit avpkt 1000 prio 1 maxburst 20 bounded
# ipchains -I input -s 0/0 -d 192.168.2.100 -m 100
# tc filter add dev eth1 parent 1:0 protocol ip prio 10 handle 100 fw classid 1:1


But after these commands still on 192.168.2.100Pc I am getting good downbload speed somewhere around 30-35 Kbps.

Please someone help me,where I am making mistake.

http://www.tldp.org/HOWTO/Bandwidth-...WTO/index.html
Presenting the official LDP Howto! Hopefully that helps

Thanks for that link but it will be better if you can pin point me,where I am making mistake.

I'll do my best but I'll have to do a bit of reading first. Let you know if I find anything. Hopefully someone who's an expert will reply to this before I finish .

http://lartc.org/howto/lartc.qdisc.html
Here's one document I found, when I have time I'll get back to reading it.

http://lartc.org/howto/lartc.qdisc.classful.html#AEN679
This one also seems to apply to you. Section 9.5.3.2

Well Aparently you need to load SQUID with delay pools and CBQ runs through that.. You do not need any TC Commands Well I didn't. I am kinda really new to Linux

But I was able to get it to run on all 4 of my LAN based NIC's.. ETH1,2,3,4 running as a masq through ETH0.

You can also use
SHAPECFG "VARY EASY"
if you don't care about port based limiting or garenteed bandwith per ports you can use this utility to do total NIC card limiting

insmod -o shaper1 /lib/modules/2.4.18-14/kernel/drivers/net/shaper.o
shapecfg attach shaper1 eth1
shapecfg speed shaper1 56000
ifconfig shaper1 192.168.1.1 netmask 255.255.255.0 broadcast 192.168.1.255
route add -net 192.168.1.0 netmask 255.255.255.0 dev shaper1


INSMOD is needed to add the modual name for the shaper.
Line 2 attach's the shaper to the intrnal LAN to be shaped
Line 3 is the speed in bit's 56000 = 56k easy enough
line 4 is to bring the IP to the Shaper device. You use whatever IP you are useing for your ETH1 or other Intrnal LAN card in my case I had to do this 4 times with my ETH1,2,3,4
Line 5 is to add a route so it will route data. Vary easy to do..