extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-23 16:13:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

Make tcrules console-friendly again; finish work in tcclasses

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3461 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-02-10 15:49:03 +00:00
parent 5caaeb3af2
commit a03a65e770
1 changed files with 51 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

87
Shorewall/tcclasses
View File

@ -93,25 +93,27 @@
# #
# tos=0x<value>[/0x<mask>] (mask defaults to 0xff) # tos=0x<value>[/0x<mask>] (mask defaults to 0xff)
# - this lets you define a classifier # - this lets you define a classifier
# for the given <value>/<mask> combination # for the given <value>/<mask>
# of the IP packet's TOS/Precedence/DiffSrv # combination of the IP packet's
# octet (aka the TOS byte). Please note, # TOS/Precedence/DiffSrv octet (aka the
# classifiers override all mark settings, # TOS byte). Please note, classifiers
# so if you define a classifer for a class, # override all mark settings, so if you
# all traffic having that mark will go in it # define a classifer for a class, all
# regardless of any mark set on the packet # traffic having that mark will go in it
# by a firewall/mangle filter. # regardless of any mark set on the
# packet by a firewall/mangle filter.
# #
# NOTE: multiple tos= statements may be # NOTE: multiple tos= statements may be
# applied per class and per interface, but # applied per class and per interface,
# a given value/mask pair is valid for only # but a given value/mask pair is valid
# ONE class per interface. # for only ONE class per interface.
# #
# tos-<tosname> - aliases for the following TOS octet # tos-<tosname> - aliases for the following TOS octet
# value and mask encodings. TOS encodings # value and mask encodings. TOS
# of the "TOS byte" have been deprecated in # encodings of the "TOS byte" have been
# favor of diffserve classes, but programs # deprecated in favor of diffserve
# like ssh, rlogin, and ftp still use them. # classes, but programs like ssh,
# rlogin, and ftp still use them.
# #
# tos-minimize-delay 0x10/0x10 # tos-minimize-delay 0x10/0x10
# tos-maximize-throughput 0x08/0x08 # tos-maximize-throughput 0x08/0x08
@ -142,27 +144,30 @@
# #
# #
# Example 1: Suppose you are using PPP over Ethernet (DSL) # Example 1: Suppose you are using PPP over Ethernet (DSL)
# and ppp0 is the interface for this. You have 4 classes here, # and ppp0 is the interface for this. You have 4 classes
# the first you can use for voice over IP traffic, # here, the first you can use for voice over IP
# the second interactive traffic (e.g. ssh/telnet but not scp), # traffic, the second interactive traffic (e.g.
# the third will be for all unclassified traffic, and the # ssh/telnet but not scp), the third will be for all
# forth is for low priority traffic (e.g. peer-to-peer). # unclassified traffic, and the forth is for low
# priority traffic (e.g. peer-to-peer).
# #
# The voice traffic in the first class will be guaranteed # The voice traffic in the first class will be
# a minimum of 100kbps and always be serviced first (because # guaranteed a minimum of 100kbps and always be
# of the low priority number, giving less delay) and will be # serviced first (because of the low priority number,
# granted excess bandwidth (up to 180kbps, the class ceiling) # giving less delay) and will be granted excess
# first, before any other traffic. A single VOIP stream, # bandwidth (up to 180kbps, the class ceiling) first,
# depending upon codecs, after encapsulation, can take up to # before any other traffic. A single VOIP stream,
# 80kbps on a PPOE/DSL link, so we pad a little bit just in # depending upon codecs, after encapsulation, can take
# case. (TOS byte values 0xb8 and 0x68 are DiffServ classes # up to 80kbps on a PPOE/DSL link, so we pad a little
# EF and AFF3-1 respectively and are often used by VOIP # bit just in case. (TOS byte values 0xb8 and 0x68
# devices). # are DiffServ classes EF and AFF3-1 respectively and
# are often used by VOIP devices).
# #
# Interactive traffic (tos-minimum-delay) and TCP acks (and # Interactive traffic (tos-minimum-delay) and
# ICMP echo traffic if you use the example in tcrules) and # TCP acks (and ICMP echo traffic if you use the example
# any packet with a mark of 2 will be guaranteed 1/4 of the # in tcrules) and any packet with a mark of 2 will be
# link bandwidth, and may extend up to full speed of the link. # guaranteed 1/4 of the link bandwidth, and may extend
# up to full speed of the link.
# #
# Unclassified traffic and packets marked as 3 will be # Unclassified traffic and packets marked as 3 will be
# guaranteed 1/4th of the link bandwidth, and may extend # guaranteed 1/4th of the link bandwidth, and may extend
@ -170,13 +175,13 @@
# #
# Packets marked with 4 will be treated as low priority # Packets marked with 4 will be treated as low priority
# packets. (The tcrules example marks p2p traffic as # packets. (The tcrules example marks p2p traffic as
# such.) If the link is congested, they're only guaranteed # such.) If the link is congested, they're only
# 1/8th of the speed, and even if the link is empty, can # guaranteed 1/8th of the speed, and even if the link is
# only expand to 80% of link bandwidth just as a precaution # empty, can only expand to 80% of link bandwidth just
# in case there are upstream queues we didn't account for. # as a precaution in case there are upstream queues we
# This is the last class to get additional bandwidth and # didn't account for. This is the last class to get
# the last to get serviced by the scheduler because of the # additional bandwidth and the last to get serviced by
# low priority. # the scheduler because of the low priority.
# #
# ppp0 1 100kbit 180kbit 1 tos=0x68/0xfc,tos=0xb8/0xfc # ppp0 1 100kbit 180kbit 1 tos=0x68/0xfc,tos=0xb8/0xfc
# ppp0 2 full/4 full 2 tcp-ack,tos-minimize-delay # ppp0 2 full/4 full 2 tcp-ack,tos-minimize-delay