Íàñòðîéêà QoS äëÿ ÷àéíèêà (ðàñïðåäåëåíèå òðàôèêà â WL500gP)

À åñëè æåíà êà÷àåò ñ ftp? 80 ïîðò? À åñëè åù¸ è ñêàéï òðàôèê æð¸ò? Íà âñå ïîðòû íå íàïàñ¸øüñÿ ïðàâèë, äà è âñå ïîðòû íå ïðåäóñìîòðèøü. Èëè íå ïðàâ?

Quote:

---

Originally Posted by romanchenko

ðåæó íîóòó æåíû 80 ïîðò äî 25êá/ñ (âåñü êàíàë 500êá/ñ, åñëè øåéïèòü äî 50êá/ñ - ïîÿâëÿþòñÿ ëàãè) - äëÿ ñåðôà äîñòàòî÷íî è ìîåìó ïèíãó íå ìåøàåò.

---

Ýýýý.. Òàêèå ïðîïîðöèè - ïðÿìàÿ óãðîçà áðàêó. :)

Íè ðàçó íå óãðîçà. Íàïðèìåð, íîóò ìîåé æåíû íå òàùèò WOW, ïîýòîìó îíà èãðàåò ñ îäíîãî èç äåñêòîïîâ. Íîóò æå îêêóïèðóåò êòî-íèáóäü èç âûñåëåííûõ èç WOW äåòåé- ÷èñòî ïîñ¸ðôèòü è ïîêâèïèòü.

Îïàòü âñ¸ âñòàëî, íè îòâåòà, íè ïðèâåòà. ×òî, íèêòî íå íàñòðàèâàë, ÷òî-ëè? :mad:

Quote:

---

Originally Posted by Sorin_j

Îïàòü âñ¸ âñòàëî, íè îòâåòà, íè ïðèâåòà. ×òî, íèêòî íå íàñòðàèâàë, ÷òî-ëè? :mad:

---

Çíà÷èò íå íàñòðàèâàë. Íåò, íó ÿ â ïðèíöèïå ïðåäñòàâëÿþ ñåáå êàê è ÷òî íàïèñàòü, è êàê ðàáîòàþò âñÿêèå øåéïåðû òîæå çíàþ (ðåêîìåíäóåìîå ÷òèâî íà ýòó òåìó - linux advanced routing howto, ãóãëèòñÿ íà óðà). Íî ãîòîâîãî ñêðèïòà ó ìåíÿ íåò.  ïðèíöèïå òàì âñåãî è íàäî-òî äâà êëàññà íà CBQ è ôèëüòð îòñåêàþùèé çàæèìàåìûå àäðåñà. Äà, øåéïèòü íàäî, êîíå÷íî, br0, à íå ppp0/vlan1.

Âîò òàê. Õî÷åøü ñäåëàòü îãðàíè÷åíèÿ òðàôèêà- ïðåäëàãàþò èçó÷èòü ñèñòåìó ðóòèíãà â ëèíóêñå. À äàëüíåéøàÿ ÷àñòü ïîâåñòâîâàíè (ïðî ñêðèïòû è ÑBQ/vlan) òîæå íå äëÿ ÷àéíèêîâ ïèñàíà... :(

Ó ìåíÿ ñòîèò øåéïåð íà îñíîâå ïðåäëîæåííîãî òóò. ß íå î÷åíü ïîíèìàþ êàê îí ðàáîòàåò åñëè åãî âåøàþò íà âõîäÿùèé èíòåðôåéñ, íî ÿ åãî íåìíîãî âèäîèçìåíèë, è âåøàþ íà br0. Âðîäå áû ðàáîòàåò.  ñâÿçè ñ òåì, ÷òî îí âåøàåòñÿ íå íà âíåøíèé èíòåðôåéñ, à íà âíóòðåííèé, downlink è uplink ïîìåíÿíû ìåñòàìè, ò.å. â äàííîì ñêðèïòå uplink - ýòî ñêîðîñòü âõîäÿùåãî ñîåäèíåíèÿ, à downlink - èñõîäÿùåãî. Õîòÿ èñõîäÿùèé äàæå íå âàæåí â ýòîì ñêðèïòå, ó ìåíÿ îí íå èñïîëüçóåòñÿ.

Ìîé ìîäèôèöèðîâàííûé âàðèàíò
/opt/bin/myshaper

Code:

---

#!/bin/sh

# Wonder Shaper, last modified by Robert Koch (aka akbor)
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

DOWNLINK=10000
UPLINK=475
DEV=$2

# low priority OUTGOING traffic - you can leave this blank if you want
# low priority source netmasks
NOPRIOHOSTSRC="$3"

# low priority destination netmasks
NOPRIOHOSTDST="$4"

# low priority source ports
NOPRIOPORTSRC="$5"

# low priority destination ports
NOPRIOPORTDST="$6"

# high priority destination netmasks
HIGHPRIOHOSTDST="$7"

# high priority destination netmasks
HIGHPRIOHOSTSRC="$8"

# high priority source ports
HIGHPRIOPORTSRC="$9"

# high priority destination ports
HIGHPRIOPORTDST="$10"

if [ "$1" = "status" ]
then
    tc -s qdisc ls dev $DEV
    tc -s class ls dev $DEV
    exit
fi

# clean existing down- and uplink qdiscs, hide errors
tc qdisc del dev $DEV root    2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
    exit
fi

########## uplink ##########

# install root HTB, point default traffic to 1:20:
tc qdisc add dev $DEV root handle 1: htb default 20

# shape everything at $UPLINK speed - this prevents huge queues in your
# DSL modem which destroy latency:
tc class add dev $DEV parent 1: classid 1:1 htb rate ${UPLINK}kbit \
  ceil ${UPLINK}kbit burst 6k

tc class add dev $DEV parent 1: classid 1:2 htb rate 100mbit \
  ceil 100mbit


# high prio class 1:10 - gets 50 to 100% traffic and highest priority:
tc class add dev $DEV parent 1:1 classid 1:10 htb rate $((5*$UPLINK/10))kbit \
  ceil ${UPLINK}kbit burst 6k prio 1

# bulk & default class 1:20 - gets 40 to 100% traffic and lower priority:
tc class add dev $DEV parent 1:1 classid 1:20 htb rate $((4*$UPLINK/10))kbit \
  ceil ${UPLINK}kbit burst 6k prio 2

# lowest priority class 1:30 - gets 10 to 100% traffic and lowest priority:
tc class add dev $DEV parent 1:1 classid 1:30 htb rate $((1*$UPLINK/10))kbit \
  ceil ${UPLINK}kbit burst 6k prio 3 quantum 1500

# all get Stochastic Fairness:
tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev $DEV parent 1:20 handle 20: sfq perturb 10
tc qdisc add dev $DEV parent 1:30 handle 30: sfq perturb 10


# LAN - UNLIMITED
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip src 192.168.3.1/32 \
  flowid 1:2

# high priority for VoIP traffic (by TOS)
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip tos 0x68 0xff \
  match ip protocol 0x11 0xff \
  flowid 1:10
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip tos 0xb8 0xff \
  match ip protocol 0x11 0xff \
  flowid 1:10

# high priority for VoIP traffic (by source port)
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip sport 5004 0xffff \
  match ip protocol 0x11 0xff \
  flowid 1:10
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip sport 5060 0xffff \
  match ip protocol 0x11 0xff \
  flowid 1:10
 
# TOS Minimum Delay (ssh, NOT scp) in 1:10:
tc filter add dev $DEV parent 1:0 protocol ip prio 3 u32 \
  match ip tos 0x10 0xff \
  flowid 1:10
   
# ICMP (ip protocol 1) in the interactive class 1:10 so we
# can do measurements & impress our friends:
tc filter add dev $DEV parent 1:0 protocol ip prio 1 u32 \
  match ip protocol 1 0xff \
  flowid 1:10

# To speed up downloads while an upload is going on, put ACK packets in
# the interactive class:
#tc filter add dev $DEV parent 1: protocol ip prio 2 u32 \
#  match ip protocol 6 0xff \
#  match u8 0x05 0x0f at 0 \
#  match u16 0x0000 0xffc0 at 2 \
#  match u8 0x10 0xff at 33 \
#  flowid 1:10

# more highpriotraffic
for a in $HIGHPRIOPORTDST
do
echo HIGHPRIO DST PORT $a
    tc filter add dev $DEV parent 1: protocol ip prio 3 u32 \
      match ip dport $a 0xffff flowid 1:10
done

for a in $HIGHPRIOPORTSRC
do
echo HIGHPRIO SRC PORT $a
    tc filter add dev $DEV parent 1: protocol ip prio 3 u32 \
      match ip sport $a 0xffff flowid 1:10
done

for a in $HIGHPRIOHOSTSRC
do
    tc filter add dev $DEV parent 1: protocol ip prio 3 u32 \
      match ip src $a flowid 1:10
done

for a in $HIGHPRIOHOSTDST
do
    tc filter add dev $DEV parent 1: protocol ip prio 3 u32 \
      match ip dst $a flowid 1:10
done

# some traffic however suffers a worse fate
for a in $NOPRIOPORTDST
do
echo NOPRIO DST PORT $a
    tc filter add dev $DEV parent 1: protocol ip prio 14 u32 \
      match ip dport $a 0xffff flowid 1:30
done

for a in $NOPRIOPORTSRC
do
echo NOPRIO SRC PORT $a
    tc filter add dev $DEV parent 1: protocol ip prio 15 u32 \
      match ip sport $a 0xffff flowid 1:30
done

for a in $NOPRIOHOSTSRC
do
echo NOPRIO HOST SRC $a
    tc filter add dev $DEV parent 1: protocol ip prio 16 u32 \
      match ip src $a flowid 1:30
done

for a in $NOPRIOHOSTDST
do
echo NOPRIO HOST DST $a
    tc filter add dev $DEV parent 1: protocol ip prio 17 u32 \
      match ip dst $a flowid 1:30
done

# rest is 'non-interactive' ie 'bulk' and ends up in 1:20
#tc filter add dev $DEV parent 1: protocol ip prio 1 u32 \
#  match ip dst 0.0.0.0/0 flowid 1:20

########## downlink ##########

# slow downloads down to somewhat less than the real speed  to prevent
# queuing at our ISP. Tune to see how high you can set it.
# ISPs tend to have *huge* queues to make sure big downloads are fast
#
# attach ingress policer:
#tc qdisc add dev ppp0 handle ffff: ingress

# filter *everything* to it (0.0.0.0/0), drop everything that's
# coming in too fast:
#tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
#  0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
#tc filter add dev ppp0 parent ffff: protocol ip prio 50 u32 match ip sport \
#  6882 0xffff police rate 256kbit burst 10k drop flowid :1

---

Çàïóñêàòü òàê
/opt/bin/myshaper start br0 "âíåøíèå_ÀÄÐÅÑÀ_ñ_ÍÈÇÊÈÌ_ïðèîðèòåòîì" "âíóòðåííèå_ÀÄÐÅÑÀ_ñ_ÍÈÇÊÈÌ_ïðèîðèòåòîì" "âíåøíèå_ÏÎÐÒÛ_ñ_ÍÈÇÊÈÌ_ïðèîðèòåòîì" "âíóòðåííèå_ÏÎÐÒÛ_ñ_ÍÈÇÊÈÌ_ïðèîðèòåòîì" "âíåøíèå_ÀÄÐÅÑÀ_ñ_ÂÛÑÎÊÈÌ_ïðèîðèòåòîì" "âíóòðåííèå_ÀÄÐÅÑÀ_ñ_ÂÛÑÎÊÈÌ_ïðèîðèòåòîì" "âíåøíèå_ÏÎÐÒÛ_ñ_ÂÛÑÎÊÈÌ_ïðèîðèòåòîì" "âíóòðåííèå_ÏÎÐÒÛ_ñ_ÂÛÑÎÊÈÌ_ïðèîðèòåòîì"

ß íàïðèìåð âûçûâàþ èç /usr/local/sbin/post-firewall
/opt/bin/myshaper start br0 "" "" "" "6667" "" "" "22 5190 6112" ""

Ýòî óìåíüøàåò ïðèîðèòåò äëÿ âõîäÿùåãî òðàôèêà íà ïîðò 6667 (òàì ó ìåíÿ âèñèò òîððåíò), à òàêæå ñòàâèò âûñîêèé ïðèîðèòåò äëÿ SSH, ICQ, GuildWars

Quote:

---

Originally Posted by dadittoz

/opt/bin/myshaper start br0 "" "" "" "6667" "" "" "22 5190 6112" ""

Ýòî óìåíüøàåò ïðèîðèòåò äëÿ âõîäÿùåãî òðàôèêà íà ïîðò 6667 (òàì ó ìåíÿ âèñèò òîððåíò), à òàêæå ñòàâèò âûñîêèé ïðèîðèòåò äëÿ SSH, ICQ, GuildWars

---

Ðåêîìåíäóþ äîáàâèòü DNS.

:o dadittoz íå ìîã áû òû îáüÿñíèòü ÷àéíèêó êàê âñå òî ÷òî òû íàïèñàë ïîñòàâèòü â ìàðøóðòèçàòîð :o:o:o

Ïîïðîáóþ :) Íà âñÿêèé ñëó÷àé ïèøó â ñëó÷àå, åñëè ó âàñ íåò âíåøíåãî äèñêà ó ðóòåðà.

1) Çàéòè íà ðóòåð ÷åðåç ssh èëè telnet êàê â ïåðâîì ñîîáùåíèè â ýòîé òåìå
Åñëè âû íå âûïîëíÿëèè èíñòðóêöèè ïî ïåðâîíà÷àëüíîé íàñòðîéêå, çàïóñòèòå ýòî:

Code:

---

mkdir -p /usr/local/sbin/
echo "#!/bin/sh" >> /usr/local/sbin/post-boot
cp /usr/local/sbin/post-boot /usr/local/sbin/post-firewall
cp /usr/local/sbin/post-boot /usr/local/sbin/post-mount
cp /usr/local/sbin/post-boot /usr/local/sbin/pre-shutdown
chmod +x /usr/local/sbin/p*

---

2) ñêà÷àòü ôàéë ñêðèïòà myshaper (ÿ òóò åãî âðåìåííî âûëîæèë)

Code:

---

wget http://www.humanscore.com/tmp/myshaper -O /usr/local/sbin/myshaper

---

ïîñòàâèòü ïðàâà íà çàïóñê äëÿ íåãî

Code:

---

chmod +x /usr/local/sbin/myshaper

---

îòðåäàêòèðîâàòü

Code:

---

vi /usr/local/sbin/myshaper

---

íàæàòü i
èñïðàâèòü ñòðî÷êè, ñäåëàòü òàê ÷òîáû çíà÷åíèå DOWNLINK ñîîòâåòñâîâàëî èñõîäÿùåé ñêîðîñòè âàøåãî êàíàëà â èíòåðíåò, à UPLINK âõîäÿùåé â êèëîáèòàõ

Code:

---

DOWNLINK=10000
UPLINK=475

---

ïîñëå èñïðàâëåíèÿ íàæàòü

Code:

---

Esc
:w
:q

---

ôàéë äîëæåí ñîõðàíèòüñÿ, à âû îêàçàòüñÿ â êîììàíäíîé ñòðîêå
3) Äîáàâèòü âûçîâ myshaper â /usr/local/sbin/post-firewall

Code:

---

vi /usr/local/sbin/post-firewall

---

Âñòàâèòü ñòðî÷êó (àíàëîãè÷íî ïóíêòó 2)
Ýòî ïðèìåð äëÿ òîãî ÷òîáû óìåíüøèòü ïðèîðèòåò äëÿ ïîðòà 6667, à òàêæå óâåëè÷èòü äëÿ 22 53 5190. Åñëè íóæíî ÷òî-òî äðóãîå, ñìîòðèòå ìîé ïðåäûäóùèé ïîñò ñ îïèñàíèåì ïàðàìåòðîâ, èëè ïèøèòå çäåñü, ïîïðîáóåì ïðèäóìàòü äëÿ âàøåãî ñëó÷àÿ.

Code:

---

/usr/local/sbin/myshaper start br0 "" "" "6667" "" "" "" "22 53 5190 6112" ""

---

Îïèñàíèå ïàðàìåòðîâ ñìîòðèòå â ïðåäûäóùåì ñîîáùåíèè. Ñîõðàíèòü, âûéòè.
4) Ñîõðàíèòü èçìåíåíèÿ âî ôëýø.

Code:

---

flashfs save
flashfs commit
flashfs enable

---

5) Ïåðåçàãðóçèòü ðóòåð

Code:

---

reboot

---

èëè çàïóñòèòü post-firewall

Code:

---

/usr/local/sbin/post-firewall

---

ÓÐÀ! Ïðèñòóïèì.
1. [admin@WL-001731xxxx41 root]$ wget http://www.humanscore.com/tmp/myshaper -O /usr/local/sbin/myshaper
wget: /usr/local/sbin/myshaper: No such file or directory

Õîðîøî, ïîïðîáóåì òàê:
1a. cd ..
1b. [admin@WL-001731xxxx41 /]$ wget http://www.humanscore.com/tmp/myshaper -O /usr/local/sbin/
Connecting to www.humanscore.com[66.98.222.101]:80
sbin 100% |*****************************| 5849 00:00 ETA

×òî-òî êóäà-òî çàãðóçèëîñü.
Äàëüøå-òî ÷òî?

×òî-òî ìíå êàæåòñÿ, ÷òî òàì íåñêîëüêî ïàïîê /sbin, ïîïûòàëñÿ ñîçäàòü ôàéë â îäíîé- ïèøåò, ÷òî ôàéëîâàÿ ñèñòåìà read-only...
È åù¸ ïðè âûâîäå êîìàíäû ls íàçâàíèÿ âûâîäÿòñÿ ðàçíûì öâåòîì- ñèíèì, ãîëóáûì, ñåðûì (Putty, telnet). ×òî-áû ýòî çíà÷èëî?

Âèäèìî âû íå âûïîëíÿëè èíñòðóêöèè ïî ïåðâîíà÷àëüíîé íàñòðîéêå.

È íå ìîäèôèöèðóéòå êîìàíäû ïîæàëóéñòà íà ñâîé âêóñ :) Çàïóñòèâ

Code:

---

wget http://www.humanscore.com/tmp/myshaper -O /usr/local/sbin/

---

âû ñîçäàëè ôàéë /usr/local/sbin. Òåïåðü åãî íàäî óäàëèòü, åñëè âû íå ïåðåçàãðóæàëè ðóòåð èëè çàïóñêàëè êîìàíäû flashfs save è ò.ä.

Óäàëÿåì ôàéë íà âñÿêèé ñëó÷àé. Åñëè âûäàñò îøèáêó, íè÷åãî ñòðàøíîãî, çíà÷èò ýòîãî ôàéëà íåò

Code:

---

rm /usr/local/sbin

---

Ïîñëå ýòîãî âûïîëíèòå ýòè êîìàíäû:

Code:

---

mkdir -p /usr/local/sbin/
echo "#!/bin/sh" >> /usr/local/sbin/post-boot
cp /usr/local/sbin/post-boot /usr/local/sbin/post-firewall
cp /usr/local/sbin/post-boot /usr/local/sbin/post-mount
cp /usr/local/sbin/post-boot /usr/local/sbin/pre-shutdown
chmod +x /usr/local/sbin/p*

---

Ïî ïîâîäó öâåòà: ñâåòëî ãîëóáûì ïîêàçûâàþòñÿ ññûëêè íà ôàéëû, çåëåíûì çàïóñêàåìûå ôàéëû, ñèíèì êàòàëîãè, ñåðûì ïðîñòî ôàéëû.

Íàñ÷åò read-only ôàéëîâîé ñèñòåìû âñå ïðàâèëüíî, ó âàñ íå ïîëó÷èòñÿ ñîçäàòü ôàéëû â êàòàëîãå /sbin, /bin è ò.ä. Òîëüêî â êàòàëîãå /tmp. Äà è òàì ôàéëû ïðè ïåðåçàãðóçêå óäàëÿòñÿ, åñëè èõ íå ñîõðàíèòü ñ ïîìîùüþ êîììàíä flashfs. Åñëè âû çàïóñòèòå ls -al /usr, òî óâèäèòå, ÷òî êàòàëîã /usr/local ïî ñóòè ÿâëÿåòñÿ ññûëêîé íà êàòàëîã /tmp/local. È ïîýòîìó òàì ó âàñ ïîëó÷èòñÿ ñîçäàòü ôàéë â /usr/local/sbin, è åñëè âû ñîõðàíèòå åãî ñ ïîìîùüþ êîìàíä flashfs, òî îí áóäåò âîññòàíàâëèâàòüñÿ ïîñëå ïåðåçàãðóçêè.

Íó êîíå÷íî, íèêàêèå ssh-ñåðâåðà ÿ íå íàñòðàèâàë. Íèêòî íå ïðîñèë.
Íî ïî óêàçàííîé ññûëêå äåéñòâîâàòü òîæå íå ïîëó÷àåòñÿ:
[admin@WL-001731xxxx41 root]$ mkdir -p /usr/local/sbin/
mkdir: Cannot create directory `/usr/local/sbin/': Not a directory
Âîò òàê ïîêà...

P.S. Î, ÷óäî! ß äîï¸ð! Ñíà÷àëà ÿ ïîïîáîâàë òàê:
[admin@WL-001731xxxx41 root]$ mkdir -p /usr/local/sbin
mkdir: Cannot create directory `/usr/local/sbin': File exists
Àãà! Ýòî òîò "sbin", êîòîðûé ÿ ñîçäàë êîìàíäîé "wget http://www.humanscore.com/tmp/myshaper -O /usr/local/sbin/" . Óäàëÿåì åãî:
[admin@WL-001731xxxx41 root]$ rm /usr/local/sbin
Ïðîáóåì äåëàòü äèðåêòîðèþ:
[admin@WL-001731xxxx41 root]$ mkdir -p /usr/local/sbin/
[admin@WL-001731xxxx41 root]$
Óðà, ïîêà ïîëó÷àåòñÿ. Ðîåì äàëüøå...

 îáùåì, âñ¸ ïîëó÷èëîñü. Íî êîãäà îíî âñ¸ ïîëó÷èëîñü, ÿ ïîíÿë: ìåíÿ îïÿòü ðàçâåëè.  ïåðâîì ñîîáùåíèè ïèñàë: "Çàäà÷à: îáëàäàÿ ìèíèìàëüíûì îïûòîì ðàáîòû ñ Linux, íàñòðîèòü îãðàíè÷åíèÿ ïî ñêà÷èâàíèþ ñ WAN äëÿ êîìïüþòåðîâ âíóòðåííåé ñåòè (äëÿ ïðèìåðà, ñ IP 192.168.1.3, 192.168.1.72, 192.168.1.115)."
Òóò, çàìåòüòå, íåò íè ñëîâà ïðî ïîðòû. Ýòî ïîòîìó, íåâîçìîæíî âûÿñíÿòü, _ïî êàêîìó ïîðòó_ ïðîèñõîäÿò ñîåäèíåíèÿ ñ êîìïüþòåðîâ â ìîåé âíóòðåííåé ñåòè. Íóæíî îãðàíè÷èòü òðàôèê ÏÎ ÂÑÅÌ ÏÎÐÒÀÌ. Íå äîëæíî áûòü íèêàêîãî äåëà, ïî êàêèì ïîðòàì êòî ñåãîäíÿ êà÷àåò èíôó. Òàì ìîãóò áûòü è ïðîñìîòð âèäåî ñ youtube, è òîððåíò-êëèåíò, è Skype, è QIP, è FTP, è åù¸ 65000 ïîðòîâ. È ÷òî, âñå èõ âíîñèòü â myshaper???