上一页 1 2 3 4 5 6 7 ··· 10 下一页

2015年12月9日

摘要: u32过滤器一般使用ip地址作为匹配规则,但按照其定义,它可以匹配ip包头的任意地址,这里使用mac地址限制局域网的下载速度,避免客户端修改ip后其下载速度得不到控制。tc qdisc del dev eth2 roottc qdisc add dev eth2 root handle 200: c... 阅读全文
posted @ 2015-12-09 19:40 CasonChan 阅读(2422) 评论(0) 推荐(0) 编辑
摘要: Quantum & r2qLet's assume we have 2 classes with the same parent :Parent : ceil = rate = 100class 1 : rate = 40 and ceil = 100class 2 : rate = 20 and ... 阅读全文
posted @ 2015-12-09 19:40 CasonChan 阅读(401) 评论(0) 推荐(0) 编辑
摘要: 这几天正在捣鼓防火墙,用到了hashlimit模块。Google了一圈发现相关的文档无论英文还是中文都很少,所以我就把自己的折腾的心得记录下来吧。hashlimit是iptables的一个匹配模块,用它结合iptables的其它命令可以实现限速的功能。(注意,单独hashlimit模块是无法限速的)... 阅读全文
posted @ 2015-12-09 19:39 CasonChan 阅读(1592) 评论(0) 推荐(0) 编辑
摘要: # Examples that match MAC (a big "thank you" to Julian Anastasov for this!):M0 through M5 are the 6 bytes of the MAC address.Egress (match destination... 阅读全文
posted @ 2015-12-09 19:38 CasonChan 阅读(675) 评论(0) 推荐(0) 编辑
摘要: 设定规则iptables -p INPUT DROPiptables -p OUTPUT ACCEPTiptables -p FORWARD DROP1、防止外网用内网IP欺骗iptables -t nat -A PREROUTING -i eth0 -s 10.0.0.0/8 -j DROPipt... 阅读全文
posted @ 2015-12-09 19:37 CasonChan 阅读(521) 评论(0) 推荐(0) 编辑
摘要: I have a very nice shaper in my linux box :-)Howthe configuratorworks— it’s another question, here i will try to describe how one could configure her ... 阅读全文
posted @ 2015-12-09 19:35 CasonChan 阅读(373) 评论(0) 推荐(0) 编辑
摘要: ifbThe Intermediate Functional Block deviceis the successor to the IMQ iptables module that was never integrated.Advantage over current IMQ; cleaner i... 阅读全文
posted @ 2015-12-09 18:29 CasonChan 阅读(2686) 评论(0) 推荐(0) 编辑
摘要: If you have a need for thousands of rules, for example if you have a lot of clients or computers, all with different QoS specifications, you may find ... 阅读全文
posted @ 2015-12-09 18:27 CasonChan 阅读(236) 评论(0) 推荐(0) 编辑
摘要: Theu32classifierThe U32 filter is the most advanced filter available in the current implementation. It entirely based on hashing tables, which make it... 阅读全文
posted @ 2015-12-09 18:26 CasonChan 阅读(355) 评论(0) 推荐(0) 编辑
摘要: OverviewThe u32 filter allows you to match on any bit field within a packet, so it is in some ways the most powerful filter provided by the Linux traf... 阅读全文
posted @ 2015-12-09 18:25 CasonChan 阅读(1118) 评论(0) 推荐(0) 编辑
上一页 1 2 3 4 5 6 7 ··· 10 下一页

导航