Øåéïåð ñ ïðèîðåòèçàöèåé ïî ïîðòàì

[indlg0]

Äîáðûé äåíü, Äðóçüÿ!

Èñêàë íà ôîðóìå îòâåò, íî ïîëîæèòåëüíûõ ðåçóëüòàòîâ ýòî íå äàëî, ïîòîìó ïðîøó î ïîìîùè!

Èñõîäíûå:
Dev: Wl500g Premium
Firmware Version: 1.9.2.7
Firmware Release: 1.9.2.7-7f

Çàäà÷à: Ïîðåçàòü âõîäÿùèé òðàôèê èç óñëîâèé: ×òî áû íà êàæäûé LAN óõîäèëî 256 ÊÁèò ìèíèìóì, ò.å. ãàðàíòèðîâàííî, à ìàêñèìóì 1 ÌÁèò, êîãäà äðóãèå LAN íå èñïîëüçóþò ñåòü.

Âîò òàêóþ çàäà÷êó ïîñòàâèë ñàì ñåáå...

Âîïðîñ. ÊÀÊ ýòî ìîæíî ñäåëàòü?!

[Oleg]

Ñ ËÀÍ ïîðòàìè íàâåðíîå ìîæíî, íî òÿæåëîâàòî. Âîò ñ Ip Àäðåñàìè - ïîïðîùå...

[indlg0]

Ñ ËÀÍ ïîðòàìè íàâåðíîå ìîæíî, íî òÿæåëîâàòî. Âîò ñ Ip Àäðåñàìè - ïîïðîùå...

Ñïàèáî, ÷òî îòêëèêíóëñÿ

ß ïðîáîâàë øòàòíûìè ñðåäñòâàìè ÷åðåç Âåáôåéñ... ðåçóëüòàò íåïîíÿòåí áûë.

Ñõåìà äåëèòàíòñêàÿ, åñëè ÷òî ïîïðàâü ïîæàëóéñòà:
1. íàñòðàèâàåì òðèãåð òàêèì îáðàçîì, ÷òî áû âñå, ÷òî ïðèõîäèò èç âíå íà îïðåäåëåííûé ÈÏ (â ËÀÍå) ñâàëèâàëîñü â îäèí ïîðò (âçÿë 80 çà îñíîâó)
2. Íàñòðàèâàåì øèðèíó êàíàëà äëÿ çàäàííîãî ÈÏ ìèí. è ìàêñ. ñ ïðèâÿçêîé íà ïîðò 80
3. ñìîòðèì ðåçóëüòàò ïðè ñêà÷èâàíèè ôèëüìà (ïðîâåðåííî áûñòðûé õîñò)...

Ðåçóëüòàò íå ñîâñåì ïîíÿòåí... Ïðè óêàçàíèè ìàëûõ çíà÷åíèé øèðèíû êàíàëà, çàêà÷èâàíèå ëèáî ñëèøêîì ìåäëåííîå, è íå ñîïîñòàâèìî ñ çàäàííûìè öèôðàìè íà ñàìîì ðîóòåðå. È òîëüêî ïðè áîëåå èëè ìåíåå êðóïíûõ çíà÷åíèé, îò 10-15 ÊÁèò ñêîðîñòü àäåêâàòíàÿ, íî êàê òî, âñå ðàâíî íå ñîïîñòàâèìî, íî òåïåðü â ñòîðîíó óâåëè÷åíèÿ, ò.å. áîëüøå çàäàííîãî çíà÷åíèÿ.

Ëîãèêà åñòü â ìîèõ äîìûñëàõ?

Çàìåð äåëàë íà "ñêîðóþ ðóêó" øòàòíûìè ñðåäñòàâè Âèí ÕÐ. (òèêåð - ÷èñëî áàéò ïåðåäàííûõ-ïðèíÿòûõ â èíòåðâàëå âðåìåíè)

[AlexeyA]

Áûëà çàäà÷à - ïîäåëèòü 128 êáèò íà 5 ïîëüçîâàòåëåé ïðåäîñòàâëÿÿ êàæäîìó êàê ìèíèìóì 24 êáèòà (ôàêòè÷åñêè äåëèòü ïîëîñó ïîðîâíó ìåæäó âñåìè ðàáîòàþùèìè êîìïüþòåðàìè). Êðîìå òîãî áûëà çàäà÷à óìåíüøèòü ïîòåðþ ïàêåòîâ ó ïðîâàéäåðà.

Ðåøåíèå:

Æåëåçî - ìàðøðóòèçàòîð asus wl-500g Premium ñ ïðîøèâêîé 1.9.2.7-7f (2006-11-06) http://oleg.wl500g.info/

Ðîäíîé bandwidth management íàäî îòðóáèòü â ïàíåëè óïðàâëåíèÿ.

----------------------------------
Ñîçäàòü /usr/local/sbin
Òàì ñîçäàòü
-rwxr-xr-x post-firewall
-rwxr-xr-x wshaper

----------------------------------
ñîäåðæàíèå post-firewall:
#!/bin/sh
/usr/local/sbin/wshaper start vlan0 120 120

----------------------------------
ñîäåðæàíèå wshaper (îðèãèíàëüíûé ñêðèïò ëåæèò â /sbin)
#/bin/sh
# Wonder Shaper
# please read the README before filling out these values
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

DOWNLINK=$3
UPLINK=$4
DEV=$2

#echo Please read the documentation in 'README' first
#exit

if [ "$1" = "status" ]
then
# tc -s qdisc ls dev $DEV
tc -s class ls dev $DEV
exit
fi


# clean existing down- and uplink qdiscs, hide errors
tc qdisc del dev $DEV root 2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
exit
fi


###### uplink

# install root HTB, point default traffic to 1:99:
tc qdisc add dev $DEV root handle 1: htb default 99

# root class 1
tc class add dev $DEV parent 1: classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.0.254)
tc class add dev $DEV parent 1:1 classid 1:2 htb rate 100mbit
tc qdisc add dev $DEV parent 1:2 handle 2: sfq perturb 10
tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
match ip src 192.168.0.254 flowid 1:2

# internet traffic subclass 10
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
ceil ${UPLINK}kbit

# internet traffic subclasses 11, 12, 13,... for each client IP
tc class add dev $DEV parent 1:10 classid 1:11 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:12 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:13 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:14 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:15 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:99 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2

# creating quques for each class
tc qdisc add dev $DEV parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $DEV parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $DEV parent 1:14 handle 14: sfq perturb 10
tc qdisc add dev $DEV parent 1:15 handle 15: sfq perturb 10
tc qdisc add dev $DEV parent 1:99 handle 99: sfq perturb 10

#sending traffic from clinet's IP's to classes
tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.1 flowid 1:11

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.2 flowid 1:12

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.3 flowid 1:13

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.4 flowid 1:14

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.5 flowid 1:15

########## downlink #############
# slow downloads down to somewhat less than the real speed to prevent
# queuing at our ISP. Tune to see how high you can set it.
# ISPs tend to have *huge* queues to make sure big downloads are fast
#
# attach ingress policer:

tc qdisc add dev $DEV handle ffff: ingress

# filter *everything* to it (0.0.0.0/0), drop everything that's
# coming in too fast:

tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
0.0.0.0/0 police rate ${DOWNLINK}kbit burst 1k drop flowid :1


----------------------------------
ñîõðàíèòü íàñòðîéêè è ïåðåçàïóñòèòü ðîóòåð:
flashfs save
flashfs commit
flashfs enable
reboot

Øåéïèíã ïîâåøåí íà vlan0 (ýòî ëîêàëüíàÿ ñåòü) à íå íà pppoe ïîòîìó ÷òî øåéïåð ìîæåò ðàçðóëèâàòü òîëüêî èñõîäÿùèé òðàôèê íà èòíåðôåéñå. Èç çà ýòîãî ïðèøëîñü îòäåëüíî îáîçíà÷àòü ëîêàëüíûé òðàôèê ÷òîáû íå ïðîïóñêàòü åãî ÷åðåç øåéïåð. Îáùàÿ ñêîðîñòü îãðàíè÷åíà 120 êáèò ÷òîáû óìåíüøèòü ïîòåðè ïàêåòîâ ó ïðîâàéäåðà (÷òîáû ó ïðîâàéäåðà íå ñêàïëèâàëàñü áîëüøàÿ î÷åðåäü è íå äðîïàëèñü ïàêåòû).

Øåéïèíã èñõîäÿùåãî òðàôèêà ïîêà ÷òî íå äåëàë. Ïðèîðèòåòû òðàôèêà íå çàäàâàë. Íå áûëî íåîáõîäèìîñòè ïîêà ÷òî . Òî ÷òî ñäåëàíî - ïðîâåðåíî è ðàáîòàåò êàê ñëåäóåò.

[Janik]

Äîáðûé äåíü!
À ìîæíî ëè ñ ïîìîùüþ âûøå èçëîæåííîãî ïîäåëèòü òðàôèê pppoe íà òðè êîìïà?

êîìï ïî ïðîâîäó 1 - 256ê
êîìï ïî ïðîâîäó 2 - 128ê
êîìï ïî ïðîâîäó 3 - 128ê
íîóò ïî wifi - 128k
ÊÏÊ ïî wifi - 128k

êîìï 1 ðàáîòàåò ðåäêî.

È åù¸, ìåæäó êîìïàìè (â ñåòè 192.168.1.1/6) äîëæíà áûòü ìàêñèìàëüíàÿ ñêîðîñòü!

Âîò ñîáñòâåííî è âñ¸, æäó âàøîãî îòâåòà!

[AlexeyA]

Можно, только нужно вешать шейпер на интерфейс br0 чтобы он работал еще и с вайфай. К сожалению я не знаю как сделать неравномерное деление трафика - только каждому поровну. (Правда можно задавать приоритеты. Еще есть идея - можно попробовать делать более ветвистое дерево классов трафика)

Привожу последний мой вариант скриптов- добавил ограничение на исходящий трафик на ppp0, убрал класс 99, добавил еще айпишников и сделал чтобы и по вайфаю все это работало в том числе.

192.168.1.1/6 это неправильное обозначение подсети судя по всему. 192.168.1.1 - 192.168.1.6 - надо было писать. оно там вроде бы будет ходить без ограничений, во всяком случае у меня так и есть... почемуто...

P.s. wifi антенна из консервной банки это мощно...

post-firewall:

#!/bin/sh
/usr/local/sbin/wshaper start br0 115
/sbin/wshaper start ppp0 1000 115


wshaper:

#/bin/sh
# Wonder Shaper
# please read the README before filling out these values
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

UPLINK=$3
DEV=$2

# Now remove the following two lines :-)

#echo Please read the documentation in 'README' first
#exit

if [ "$1" = "status" ]
then
# tc -s qdisc ls dev $DEV
tc -s class ls dev $DEV
exit
fi


# clean existing down- and uplink qdiscs, hide errors
tc qdisc del dev $DEV root 2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
exit
fi


###### uplink

# install root HTB, point default traffic to 1:99:
tc qdisc add dev $DEV root handle 1: htb default 99

# root class 1
tc class add dev $DEV parent 1: classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.0.254)
tc class add dev $DEV parent 1:1 classid 1:2 htb rate 100mbit
tc qdisc add dev $DEV parent 1:2 handle 2: sfq perturb 10
tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
match ip src 192.168.0.254 flowid 1:2

# internet traffic subclass 10
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
ceil ${UPLINK}kbit

# internet traffic subclasses 11, 12, 13,... for each client IP
tc class add dev $DEV parent 1:10 classid 1:11 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:12 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:13 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:14 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:15 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:16 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:17 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:18 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2
tc class add dev $DEV parent 1:10 classid 1:19 htb rate 1kbit \
ceil ${UPLINK}kbit prio 2

# creating quques for each class
tc qdisc add dev $DEV parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $DEV parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $DEV parent 1:14 handle 14: sfq perturb 10
tc qdisc add dev $DEV parent 1:15 handle 15: sfq perturb 10
tc qdisc add dev $DEV parent 1:16 handle 16: sfq perturb 10
tc qdisc add dev $DEV parent 1:17 handle 17: sfq perturb 10
tc qdisc add dev $DEV parent 1:18 handle 18: sfq perturb 10
tc qdisc add dev $DEV parent 1:19 handle 19: sfq perturb 10

#sending traffic from clinet's IP's to classes
tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.1 flowid 1:11

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.2 flowid 1:12

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.3 flowid 1:13

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.4 flowid 1:14

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.5 flowid 1:15

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.6 flowid 1:16

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.7 flowid 1:17

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.8 flowid 1:18

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.9 flowid 1:19

[Janik]

Íåå, òàêîå íå óñòðàèâàåò..
À âîçìîæíî óñòàíîâèòü äîï. ñîô íà wl-500gP ÷òî áû îí çàíèìàëñÿ äåëåíèåì òðàôèêà ïî ìîåé ñõåìå?
Êñòàòè Wi-Fi êëèåíòû ìîãóò õîäèòü áåç îãðàíè÷åíèé(ýòî â èäåàëå ìîæíî èì ïîðåçàòü ñêîðîñòü).

P.s. wifi àíòåííà èç êîíñåðâíîé áàíêè ýòî ìîùíî...

Çà òî äåøåâî è ðàáîòàåò íå õóæå çàâîäñêîé!

Íîâàÿ ñõåìêà ñåòêè (áåç Wi-FI êëèåíòîâ):

[AlexeyA]

Если надо жестко ограничить максимальную скорость на каждый хост то это делается элементарно задав параметр ceil= rate=max speed для каждого IP в этих скриптах. У меня то задача была в динамическом перераспределении нашего дохлого канала (128) если он свободен на всех желающих. Чтобы при этом если один запустил мега-качалку на 10 потоков у остальных все не умирало.

[Janik]

Åñëè íàäî æåñòêî îãðàíè÷èòü ìàêñèìàëüíóþ ñêîðîñòü íà êàæäûé õîñò òî ýòî äåëàåòñÿ ýëåìåíòàðíî çàäàâ ïàðàìåòð ceil= rate=max speed äëÿ êàæäîãî IP â ýòèõ ñêðèïòàõ. Ó ìåíÿ òî çàäà÷à áûëà â äèíàìè÷åñêîì ïåðåðàñïðåäåëåíèè íàøåãî äîõëîãî êàíàëà (128) åñëè îí ñâîáîäåí íà âñåõ æåëàþùèõ. ×òîáû ïðè ýòîì åñëè îäèí çàïóñòèë ìåãà-êà÷àëêó íà 10 ïîòîêîâ ó îñòàëüíûõ âñå íå óìèðàëî.

À ìîæíî ïîêàçàòü ýòî íà ïðèìåðå?

[AlexeyA]

Ну в вашем случае это будет видимо так :

post-firewall:

#!/bin/sh
/usr/local/sbin/wshaper start br0 512
/sbin/wshaper start ppp0 1000 512


wshaper:

#/bin/sh
# Wonder Shaper
# please read the README before filling out these values
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

UPLINK=$3
DEV=$2

# Now remove the following two lines :-)

#echo Please read the documentation in 'README' first
#exit

if [ "$1" = "status" ]
then
# tc -s qdisc ls dev $DEV
tc -s class ls dev $DEV
exit
fi


# clean existing down- and uplink qdiscs, hide errors
tc qdisc del dev $DEV root 2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
exit
fi


###### uplink

# install root HTB, point default traffic to 1:99:
tc qdisc add dev $DEV root handle 1: htb default 99

# root class 1
tc class add dev $DEV parent 1: classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.0.1)
tc class add dev $DEV parent 1:1 classid 1:2 htb rate 100mbit
tc qdisc add dev $DEV parent 1:2 handle 2: sfq perturb 10
tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
match ip src 192.168.0.1 flowid 1:2

# internet traffic subclass 10
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
ceil ${UPLINK}kbit

# internet traffic subclasses 12, 13,... for each client IP
tc class add dev $DEV parent 1:10 classid 1:12 htb rate 256kbit \
burst 6k prio 2
tc class add dev $DEV parent 1:10 classid 1:13 htb rate 128kbit \
burst 6k prio 2
tc class add dev $DEV parent 1:10 classid 1:14 htb rate 128kbit \
burst 6k prio 2

# creating quques for each class
tc qdisc add dev $DEV parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $DEV parent 1:14 handle 14: sfq perturb 10

#sending traffic from clinet's IP's to classes

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.2 flowid 1:12

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.3 flowid 1:13

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.4 flowid 1:14

[Janik]

Íó â âàøåì ñëó÷àå ýòî áóäåò âèäèìî òàê :

post-firewall:

#!/bin/sh
/usr/local/sbin/wshaper start br0 512
/sbin/wshaper start ppp0 1000 512


wshaper:

#/bin/sh
# Wonder Shaper
# please read the README before filling out these values
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

UPLINK=$3
DEV=$2

# Now remove the following two lines :-)

#echo Please read the documentation in 'README' first
#exit

if [ "$1" = "status" ]
then
# tc -s qdisc ls dev $DEV
tc -s class ls dev $DEV
exit
fi


# clean existing down- and uplink qdiscs, hide errors
tc qdisc del dev $DEV root 2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
exit
fi


###### uplink

# install root HTB, point default traffic to 1:99:
tc qdisc add dev $DEV root handle 1: htb default 99

# root class 1
tc class add dev $DEV parent 1: classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.0.1)
tc class add dev $DEV parent 1:1 classid 1:2 htb rate 100mbit
tc qdisc add dev $DEV parent 1:2 handle 2: sfq perturb 10
tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
match ip src 192.168.0.1 flowid 1:2

# internet traffic subclass 10
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
ceil ${UPLINK}kbit

# internet traffic subclasses 12, 13,... for each client IP
tc class add dev $DEV parent 1:10 classid 1:12 htb rate 256kbit \
burst 6k prio 2
tc class add dev $DEV parent 1:10 classid 1:13 htb rate 128kbit \
burst 6k prio 2
tc class add dev $DEV parent 1:10 classid 1:14 htb rate 128kbit \
burst 6k prio 2

# creating quques for each class
tc qdisc add dev $DEV parent 1:12 handle 12: sfq perturb 10
tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10
tc qdisc add dev $DEV parent 1:14 handle 14: sfq perturb 10

#sending traffic from clinet's IP's to classes

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.2 flowid 1:12

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.3 flowid 1:13

tc filter add dev $DEV parent 1: protocol ip prio 20 u32 \
match ip dst 192.168.0.4 flowid 1:14

Ñïàñèáî áîëüøîå! Ýòî òî ÷òî íóæíî!!!
À èñõîäÿùèé òðàôèê ìîæíî òàêèì æå ìàêàðîì íàðåçàòü?

[AlexeyA]

Можно, заместо стандартного /sbin/wshaper start ppp0 1000 512
надо запускать наш переделанный скрипт, но в нем надо поменять правила фильтров - match ip src <-> match ip dst. Также не нужно станет правило для локального трафика. Ну короче подумайте сами

[Janik]

Ìîæíî, çàìåñòî ñòàíäàðòíîãî /sbin/wshaper start ppp0 1000 512
íàäî çàïóñêàòü íàø ïåðåäåëàííûé ñêðèïò, íî â íåì íàäî ïîìåíÿòü ïðàâèëà ôèëüòðîâ - match ip src <-> match ip dst. Òàêæå íå íóæíî ñòàíåò ïðàâèëî äëÿ ëîêàëüíîãî òðàôèêà. Íó êîðî÷å ïîäóìàéòå ñàìè

Âñ¸ ïîíÿë, ñïàñèáî!

[superkent]

çàäà÷à.  ñåòè òðè êîìïüþòåðà. âñå îíè õîäÿò â èíòýðíåò ÷åðåç ëîêàëêó. ïîäêëþ÷åíèå â WAN îáû÷íûé TCP/IP. ñòàòè÷åñêèé àéïè. íóæíî äèíàìè÷åñêè ðàñïðåäåëÿòü ñêîðîñòü ìåæäó ýòèìè êîìïàìè. òàê æå åñòü ïðèîðèòåòû. íàèâûøèé ïðèîðèòåò .8, ñðåäíèé .10, íàèìåíüøèé .55
Ñêîðîñòü èíåòà âíåøíåãî 2Ì, ñêîðîñòü ëîêàëüíûõ ðåñóðñîâ ïðîâàéäåðà 100Ìá.
Ñîñòàâèë ñêðèïò. íî íå óâåðåí â ïðàâåëüíîñòè åãî ñîñòàâëåíèÿ. ïðîâåðüòå êòî-òî.

#/bin/sh
# Wonder Shaper
# please read the README before filling out these values
#
# Set the following values to somewhat less than your actual download
# and uplink speed. In kilobits. Also set the device that is to be shaped.

if [ "$1" = "status" ]
then
echo "[qdisc br0]"
/usr/sbin/tc -s qdisc show dev br0
echo "[qdisc vlan1]"
/usr/sbin/tc -s qdisc show dev vlan1
echo "[class br0]"
/usr/sbin/tc -s class show dev br0
echo "[class vlan1]"
/usr/sbin/tc -s class show dev vlan1
echo "[filter br0]"
/usr/sbin/tc -s filter show dev br0
echo "[filter vlan1]"
/usr/sbin/tc -s filter show dev vlan1
exit
fi

# clean existing down- and uplink qdiscs, hide errors
/usr/sbin/tc qdisc del dev br0 root 2> /dev/null > /dev/null
/usr/sbin/tc qdisc del dev br0 ingress 2> /dev/null > /dev/null
/usr/sbin/tc qdisc del dev vlan1 root 2> /dev/null > /dev/null
/usr/sbin/tc qdisc del dev vlan1 ingress 2> /dev/null > /dev/null

if [ "$1" = "stop" ]
then
exit
fi


if [ "$1" = "start" ]
then
# install root HTB, point default traffic to 1:99
/usr/sbin/tc qdisc add dev br0 root handle 1:0 htb default 99

# root class 1
/usr/sbin/tc class add dev br0 parent 1:0 classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.15.1)
/usr/sbin/tc class add dev br0 parent 1:1 classid 1:2 htb rate 100mbit ceil 100mbit
/usr/sbin/tc qdisc add dev br0 parent 1:2 handle 2: sfq perturb 2
/usr/sbin/tc filter add dev br0 parent 1: protocol ip prio 10 u32 match ip src 192.168.15.1 flowid 1:2

# internet traffic subclass 10
/usr/sbin/tc class add dev br0 parent 1:1 classid 1:10 htb rate 100mbit ceil 100mbit

# internet traffic subclasses 12, 13,... for each client IP
/usr/sbin/tc class add dev br0 parent 1:10 classid 1:12 htb rate 512kbit ceil 100mbit burst 6k prio 10
/usr/sbin/tc class add dev br0 parent 1:10 classid 1:13 htb rate 128kbit ceil 100mbit burst 6k prio 20
/usr/sbin/tc class add dev br0 parent 1:10 classid 1:14 htb rate 128kbit ceil 100mbit burst 6k prio 30

# creating quques for each class
/usr/sbin/tc qdisc add dev br0 parent 1:12 handle 12: sfq perturb 2
/usr/sbin/tc qdisc add dev br0 parent 1:13 handle 13: sfq perturb 2
/usr/sbin/tc qdisc add dev br0 parent 1:14 handle 14: sfq perturb 2

#sending traffic from clinet's IP's to classes
/usr/sbin/tc filter add dev br0 parent 1: protocol ip prio 10 u32 match ip dst 192.168.15.8 flowid 1:12
/usr/sbin/tc filter add dev br0 parent 1: protocol ip prio 10 u32 match ip dst 192.168.15.10 flowid 1:13
/usr/sbin/tc filter add dev br0 parent 1: protocol ip prio 10 u32 match ip dst 192.168.15.55 flowid 1:14

# install root HTB, point default traffic to 1:99
/usr/sbin/tc qdisc add dev vlan1 root handle 1:0 htb default 99

# root class 1
/usr/sbin/tc class add dev vlan1 parent 1:0 classid 1:1 htb rate 100mbit

# router traffic subslass 2 (router IP=192.168.15.1)
/usr/sbin/tc class add dev vlan1 parent 1:1 classid 1:2 htb rate 100mbit ceil 100mbit
/usr/sbin/tc qdisc add dev vlan1 parent 1:2 handle 2: sfq perturb 2
/usr/sbin/tc filter add dev vlan1 parent 1: protocol ip prio 10 u32 match ip dst 192.168.15.1 flowid 1:2

# internet traffic subclass 10
/usr/sbin/tc class add dev vlan1 parent 1:1 classid 1:10 htb rate 100mbit ceil 100mbit

# internet traffic subclasses 12, 13,... for each client IP
/usr/sbin/tc class add dev vlan1 parent 1:10 classid 1:12 htb rate 512kbit ceil 100mbit burst 6k prio 10
/usr/sbin/tc class add dev vlan1 parent 1:10 classid 1:13 htb rate 128kbit ceil 100mbit burst 6k prio 20
/usr/sbin/tc class add dev vlan1 parent 1:10 classid 1:14 htb rate 128kbit ceil 100mbit burst 6k prio 30

# creating quques for each class
/usr/sbin/tc qdisc add dev vlan1 parent 1:12 handle 12: sfq perturb 2
/usr/sbin/tc qdisc add dev vlan1 parent 1:13 handle 13: sfq perturb 2
/usr/sbin/tc qdisc add dev vlan1 parent 1:14 handle 14: sfq perturb 2

# sending traffic from clinet's IP's to classes
/usr/sbin/tc filter add dev vlan1 parent 1: protocol ip prio 10 u32 match ip src 192.168.15.8 flowid 1:12
/usr/sbin/tc filter add dev vlan1 parent 1: protocol ip prio 10 u32 match ip src 192.168.15.10 flowid 1:13
/usr/sbin/tc filter add dev vlan1 parent 1: protocol ip prio 10 u32 match ip src 192.168.15.55 flowid 1:14
fi

[YAG]

Âñ¸ ïîíÿë, ñïàñèáî!

À ÿ âîò ÷òî-òî íå ñîîáðàæó íèêàê. Íå íàðåçàåòñÿ èñõîäÿùèé òðàô è âñå... Âõîäÿùèé áåç ïðîáëåì íàðåçàåòñÿ. Help!!!