Anyone doing bw limiting with cbq or iptables?

Mike Marion mmarion at miguelito.org
Sun Mar 21 15:04:06 PST 2004


Quoting Michael J McCafferty <mike at m5computersecurity.com>:

> If you have a Cisco router or pix in there, you can use an acl to limit 
the
> 
> speed of either traffic on a certain port (done it lots) or a specific IP 
> (not done it). But, if you are using the colo's Ethernet hand-off and you 
> don't have a router or pix of your own in there then you done have the 
> luxury of such an easy fix.

Yeah, unfortunately it's on a managed switch, but one that can't limit 
rates.

> I have looked into this before and not found a super easy HOWTO on this. 
> The Advanced Routing HOWTO sent me in the right direction I think, but I 
> never did do it.

That's how I've found it.. lots of docs, but none that are very clear, at 
least to me.

> Maybe here ?
> http://lartc.org/lartc.html#LARTC.RATELIMIT.SINGLE

Hmm.. more of the same data.  The cbq script and files I setup are putting 
the same kinds of commands in play, but even when I drop settings down to 
something tiny like 1bps it doesn't seem to effect transfers.. getting 
frustrated.  

I'm going to be mad if it's like older ipchains stuff where once you setup 
one high value (I had first values kinda high until I read that Kbps to it 
was k bytes/sec not k bits/sec) that you have to reboot to really clear out 
the old settings to get new ones in instead of just clearing the tables.  I 
used to have issues like that with ipchains a couple years ago.

-- 
Mike Marion-Unix SysAdmin/Staff Engineer-http://www.miguelito.org
"If the government were to set technology standards," said Richard Diamond, 
a
spokesman for House Majority Leader Dick Armey, R-Texas, "we'd still be 
using
eight-track tapes right now."  ==> Article about the SSSCA/CBDTPA
http://www.foxnews.com/story/0,2933,48567,00.html


-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/




More information about the KPLUG-List mailing list