Forum: QOS potrzebuję dodać jednego użytkownika do skryptu

Kod Pobierz kod źródłowy


#!/bin/sh



modprobe ipt_layer7 #wczytanie L7, mozna usunac jesli nie uzywasz



DEV="br0" #nazwa device. Na std. tomato do download to br0



#makra do budowy klas, filtrow i kolejek

TCA="tc class add dev ${DEV}"

TFA="tc filter add dev ${DEV}"

TQA="tc qdisc add dev ${DEV}"

SFQ="sfq perturb 10"





#max download twojego lacza

CEIL=1900





WWWMAX=1000000



PRIO0="22222,2000,8080,8000,8001,9092"



PRIO1="20:80"



P2P="50900,32000,51413,51414"



# usuwanie/tworzenie roota

tc qdisc del dev ${DEV} root



tc qdisc add dev ${DEV} root handle 1: htb

tc class add dev ${DEV} parent 1: classid 1:1 htb rate ${CEIL}kbit



$TCA parent 1:1 classid 1:10 htb rate 256kbit ceil 400kbit prio 0

$TCA parent 1:1 classid 1:11 htb rate 200kbit ceil ${CEIL}kbit prio 1

$TCA parent 1:1 classid 1:12 htb rate 200kbit ceil ${CEIL}kbit prio 3

$TCA parent 1:1 classid 1:13 htb rate 128kbit ceil ${CEIL}kbit prio 4



# tworzenie kolejek

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ



# tworzenie filtrow

$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 3 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 4 protocol ip handle 13 fw flowid 1:13



WWWMAX

iptables -t mangle -A PREROUTING -j BCOUNT



# reguly dla programow P2P

# procesor twojego routera z pewnoscia je doceni :) gdy uzywasz L7

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j RETURN



# reguly dla PRIO0

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j RETURN





# reguly dla PRIO1

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN



# reguly dla PRIO2

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN



# regula dla PRIO3

iptables -t mangle -A PREROUTING -j MARK --set-mark 13





iptables -t mangle -A PREROUTING -m layer7 --l7proto shoutcast -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -m layer7 --l7proto skypeout -j MARK --set-mark 11