124 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
			
		
		
	
	
			124 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
| iproute2+tc*
 | |
| 
 | |
| It's the first release of Linux traffic control engine.
 | |
| 
 | |
| 
 | |
| NOTES.
 | |
| * csz scheduler is inoperational at the moment, and probably
 | |
|   never will be repaired but replaced with h-pfq scheduler.
 | |
| * To use "fw" classifier you will need ipfwchains patch.
 | |
| * No manual available. Ask me, if you have problems (only try to guess
 | |
|   answer yourself at first 8)).
 | |
| 
 | |
| 
 | |
| Micro-manual how to start it the first time
 | |
| -------------------------------------------
 | |
| 
 | |
| A. Attach CBQ to eth1:
 | |
| 
 | |
| tc qdisc add dev eth1 root handle 1: cbq bandwidth 10Mbit allot 1514 cell 8 \
 | |
| avpkt 1000 mpu 64
 | |
| 
 | |
| B. Add root class:
 | |
| 
 | |
| tc class add dev eth1 parent 1:0 classid 1:1 cbq bandwidth 10Mbit rate 10Mbit \
 | |
| allot 1514 cell 8 weight 1Mbit prio 8 maxburst 20 avpkt 1000
 | |
| 
 | |
| C. Add default interactive class:
 | |
| 
 | |
| tc class add dev eth1 parent 1:1 classid 1:2 cbq bandwidth 10Mbit rate 1Mbit \
 | |
| allot 1514 cell 8 weight 100Kbit prio 3 maxburst 20 avpkt 1000 split 1:0 \
 | |
| defmap c0
 | |
| 
 | |
| D. Add default class:
 | |
| 
 | |
| tc class add dev eth1 parent 1:1 classid 1:3 cbq bandwidth 10Mbit rate 8Mbit \
 | |
| allot 1514 cell 8 weight 800Kbit prio 7 maxburst 20 avpkt 1000 split 1:0 \
 | |
| defmap 3f
 | |
| 
 | |
| etc. etc. etc. Well, it is enough to start 8) The rest can be guessed 8)
 | |
| Look also at more elaborated example, ready to start rsvpd,
 | |
| in rsvp/cbqinit.eth1.
 | |
| 
 | |
| 
 | |
| Terminology and advices about setting CBQ parameters may be found in Sally Floyd
 | |
| papers. 
 | |
| 
 | |
| 
 | |
| Pairs X:Y are class handles, X:0 are qdisc handles.
 | |
| weight should be proportional to rate for leaf classes
 | |
| (I choosed it ten times less, but it is not necessary)
 | |
| 
 | |
| defmap is bitmap of logical priorities served by this class.
 | |
| 
 | |
| E. Another qdiscs are simpler. F.e. let's join TBF on class 1:2
 | |
| 
 | |
| tc qdisc add dev eth1 parent 1:2 tbf rate 64Kbit buffer 5Kb/8 limit 10Kb
 | |
| 
 | |
| F. Look at all that we created:
 | |
| 
 | |
| tc qdisc ls dev eth1
 | |
| tc class ls dev eth1
 | |
| 
 | |
| G. Install "route" classifier on root of cbq and map destination from realm
 | |
| 1 to class 1:2
 | |
| 
 | |
| tc filter add dev eth1 parent 1:0 protocol ip prio 100 route to 1 classid 1:2
 | |
| 
 | |
| H. Assign routes to 10.11.12.0/24 to realm 1
 | |
| 
 | |
| ip route add 10.11.12.0/24 dev eth1 via whatever realm 1
 | |
| 
 | |
| etc. The same thing can be made with rules.
 | |
| I still did not test ipchains, but they should work too.
 | |
| 
 | |
| 
 | |
| Setup and code example of BPF classifier and action can be found under
 | |
| examples/bpf/, which should explain everything for getting started.
 | |
| 
 | |
| 
 | |
| Setup of rsvp and u32 classifiers is more hairy.
 | |
| If you read RSVP specs, you will understand how rsvp classifier
 | |
| works easily. What's about u32... That's example:
 | |
| 
 | |
| 
 | |
| #! /bin/sh
 | |
| 
 | |
| TC=/home/root/tc
 | |
| 
 | |
| # Setup classifier root on eth1 root (it is cbq)
 | |
| $TC filter add dev eth1 parent 1:0 prio 5 protocol ip u32
 | |
| 
 | |
| # Create hash table of 256 slots with ID 1:
 | |
| $TC filter add dev eth1 parent 1:0 prio 5 handle 1: u32 divisor 256
 | |
| 
 | |
| # Add to 6th slot of hash table rule to select tcp/telnet to 193.233.7.75
 | |
| # direct it to class 1:4 and prescribe to fall to best effort,
 | |
| # if traffic violate TBF (32kbit,5K)
 | |
| $TC filter add dev eth1 parent 1:0 prio 5 u32 ht 1:6: \
 | |
| 	match ip dst 193.233.7.75 \
 | |
| 	match tcp dst 0x17 0xffff \
 | |
| 	flowid 1:4 \
 | |
| 	police rate 32kbit buffer 5kb/8 mpu 64 mtu 1514 index 1
 | |
| 
 | |
| # Add to 1th slot of hash table rule to select icmp to 193.233.7.75
 | |
| # direct it to class 1:4 and prescribe to fall to best effort,
 | |
| # if traffic violate TBF (10kbit,5K)
 | |
| $TC filter add dev eth1 parent 1:0 prio 5 u32 ht 1:: \
 | |
| 	sample ip protocol 1 0xff \
 | |
| 	match ip dst 193.233.7.75 \
 | |
| 	flowid 1:4 \
 | |
| 	police rate 10kbit buffer 5kb/8 mpu 64 mtu 1514 index 2
 | |
| 
 | |
| # Lookup hash table, if it is not fragmented frame
 | |
| # Use protocol as hash key
 | |
| $TC filter add dev eth1 parent 1:0 prio 5 handle ::1 u32 ht 800:: \
 | |
| 	match ip nofrag \
 | |
| 	offset mask 0x0F00 shift 6 \
 | |
| 	hashkey mask 0x00ff0000 at 8 \
 | |
| 	link 1:
 | |
| 
 | |
| 
 | |
| Alexey Kuznetsov
 | |
| kuznet@ms2.inr.ac.ru
 |