Don’t know what’s wrong.

I hope you can help me.. I have created a PopTop VPN server on a version of Linux – Debian Lenny.

I have many ppp connections at one time and I need to bandwidth shape them. The problem lies with to solutions… Either Bandwidth shape each ppp (so, ppp0 – 50kbps) and secure each ppp use to there own tunnel, (therefore – vpnUSER001 – ppp0, vpnUSER002 – ppp1 and so on) I don’t know whether this is possible tho. or create each bandwidth shape for the ip within each ppp for every one so then they can get any ppp tunnel and have there own bandwidth shape.

If you could help me that would be great. If you have any other possible solutions could you please tell me. If you know a solution please give me some code to work off as I have not been long working in the world of ”tc” and ”iproute2”.

Thank you for you time!

Dan

We have the luxury of “pulling a cowboy move” because we can access the blades remotely if we hose our networking.

I’ll let you know how it works under stress.

cheers
-mario

I haven’t tested this. Give this a go:

# As a note, it’s pretty easy to break your networking by throttling traffic to a stage where it is so congested, you can not log in to clear entries. Either test this out on a development server first, or if that isn’t possible, before you run your script, set something like: “sleep 10; tc qdisc del dev eth0 root &” which will sleep for 10 seconds and then delete your qdiscs. That way if you lock yourself out, it should automatically clear after 10 seconds.

# Set some variables
#!/bin/bash
EXT_IFACE=”eth0″
TC=”tc”
UNITS=”kbit”
LINE=”10000″ #maximum ext link speed
LIMIT=”5″ #maximum that we’ll allow

# Set some variables for individual “classes” that we’ll use to shape internal upload speed, i.e. shaping eth0
CLS1_RATE=”5″ # High Priority traffic class has 200kbit

# Delete current qdiscs. i.e. clean up
${TC} qdisc del dev ${EXT_IFACE} root

# Attach root qdiscs. We are using HTB here, and attaching this qdisc to both interfaces. We’ll label it “1:0″
${TC} qdisc add dev ${EXT_IFACE} root handle 1:0 htb

# Create root classes, with the maximum limits defined
# One for eth0
${TC} class add dev ${EXT_IFACE} parent 1:0 classid 1:1 htb rate ${LIMIT}${UNITS} ceil ${LIMIT}${UNITS}

# Create child classes

# EXT_IF (upload) now. We also set which classes can borrow and lend.
# This class is guaranteed 200kbit and can burst up to 5000kbit if available
${TC} class add dev ${EXT_IFACE} parent 1:1 classid 1:2 htb rate ${CLS1_RATE}${UNITS} ceil ${LIMIT}${UNITS}

# Add pfifo. Read more about pfifo elsewhere, it’s outside the scope of this howto.
${TC} qdisc add dev ${EXT_IFACE} parent 1:2 handle 12: pfifo limit 10

### Done adding all the classes, now set up some rules! ###
# EXT_IFACE

${TC} filter add dev ${EXT_IFACE} parent 1:0 protocol ip prio 1 u32 match ip src 0.0.0.0/0 flowid 1:2

I have a similar requirement at the datacentre. The only difference is that I need to limit only the eth0 interface outbound speed and throttle it to between 3-5kbps. The eth1 interface needs to stay at gig speed for back end communication.

Do you happen to have a one nic throttling version of this script handy?

thanks
-mario