Èñïðàâëÿåì íèçêóþ ñêîðîñòü PPTP (è íå òîëüêî)

[kirillk2]

Ïðåäëàãàþ íå ñàìûé ýëåãàíòíûé, íî ðàáî÷èé ðåöåïò ïî èñïðàâëåíèþ íèçêîé ñêîðîñòè ðàáîòû ïî PPTP.  äâóõ ñëîâàõ - íàäî ïîìåíÿòü ìàñêàðàäèíã íà ñíàò. À òåïåðü ïîäðîáíåå:

# ñîçäàåì íóæíûå äèðåêòîðèè:
mkdir -p /usr/local/sbin

# ñîçäàåì ñêðèïò getip
echo "#!/bin/sh" > /usr/local/sbin/getip
echo "EXTIF=\$1" >> /usr/local/sbin/getip
echo "IFCONFIG=/sbin/ifconfig" >> /usr/local/sbin/getip
echo "AWK=/usr/bin/awk" >> /usr/local/sbin/getip
echo "\$IFCONFIG \$EXTIF | \$AWK /\$EXTIF/'{next}//{split(\$0,a,\":\");split(a[2],a,\" \");print a[1];exit}'" >> /usr/local/sbin/getip


# ñèå ñîçäàñò ôàéë /usr/local/sbin/getip ñî ñëåäóþùèì ñîäåðæàíèåì:

#!/bin/sh
EXTIF=$1
IFCONFIG=/sbin/ifconfig
AWK=/usr/bin/awk
$IFCONFIG $EXTIF | $AWK /$EXTIF/'{next}//{split($0,a,":");split(a[2],a," ");print a[1];exit}'

# ñîçäàåì ñêðèïò masq2snat
echo "#!/bin/sh" > /usr/local/sbin/masq2snat
echo "iptables=/usr/sbin/iptables" >> /usr/local/sbin/masq2snat
echo "awk=/usr/bin/awk" >> /usr/local/sbin/masq2snat
echo "grep=/bin/grep" >> /usr/local/sbin/masq2snat
echo "export iptables" >> /usr/local/sbin/masq2snat
echo "\$iptables -t nat -nvL POSTROUTING | \$grep MASQUERADE | \\" >> /usr/local/sbin/masq2snat
echo " \$awk '{ gsub(/!/, \"! \", \$8); system( \"\$iptables -t nat -I POSTROUTING -o \"\$7\" -s \"\$8\" -d \"\$9\" -j SNAT --to-source \\\`/usr/local/sbin/getip \"\$7\"\\\`\") }'" >> /usr/local/sbin/masq2snat


# ñèå ñîçäàñò ôàéë /usr/local/sbin/masq2snat ñî ñëåäóþùèì ñîäåðæàíèåì:

#!/bin/sh
iptables=/usr/sbin/iptables
awk=/usr/bin/awk
grep=/bin/grep

export iptables
$iptables -t nat -nvL POSTROUTING | $grep MASQUERADE | \
  $awk '{ gsub(/!/, "! ", $8); system( "$iptables -t nat -I POSTROUTING -o "$7" -s "$8" -d "$9" -j SNAT --to-source \`/usr/local/sbin/getip "$7"\`") }'

# ïðîàïäåéòèì ñêðèïò post-firewall
echo "#!/bin/sh" >> /usr/local/sbin/post-firewall
echo "/usr/local/sbin/masq2snat" >> /usr/local/sbin/post-firewall

# äîáàâëÿåì ïðàâà íà âûïîëíåíèå ñêðèïòàì
chmod +x /usr/local/sbin/*

# ñîõðàíÿåì âñå ïîëó÷åííîå âî ôëåøå
flashfs save && flashfs commit && flashfs enable

Íà ìîåì øåñòèìåãàáèòíîì òàðèôå ïîñëå ïåðåõîäà ñ PPPoE íà PPTP ìàêñèìàëüíàÿ ñêîðîñòü óïàëà äî 2-3 ìåãàáèò. Ïîñëå çàìåíû ìàñêàðàäèíãà íà snat ñêîðîñòü ïîäíÿëàñü äî ïðåæíèõ çíà÷åíèé.