Sometimes you just gotta stop people taking all your bandwidth.<\/p>\n\n\n\n
Below is the process I used to restrict the speed of data on port 22. Yes scp has a built in limiter, but when people don't respect your authority, you got to break out the big guns.<\/p>\n\n\n\n
modprobe sch_netem act_police cls_flow cls_route cls_matchall cls_basic cls_flower cls_u32 cls_bpf cls_fw sch_htb sch_fq_codel sch_sfq
DEV=$(ip a | grep \"2:\" | cut -d':' -f2 | sed 's\/\\s\/\/g')<\/pre>\n\n\n\nStep 2. Add a qdisc (Queue Discipline)<\/h2>\n\n\n\n
tc qdisc add \\
dev \"${DEV}\" \\
root \\
handle 1: \\
htb \\
default 30<\/pre>\n\n\n\nStep 3. Create a single top level class which limits total bandwidth<\/h2>\n\n\n\n
tc class add \\
dev \"${DEV}\" \\
parent 1: \\
classid 1:1 \\
htb \\
rate 1gbit<\/pre>\n\n\n\nStep 4. Create a child class<\/h2>\n\n\n\n
tc class add \\
dev \"${DEV}\" \\
parent 1:1 \\
classid 1:10 \\
htb \\
rate 20mbit \\
ceil 30mbit \\
prio 1<\/pre>\n\n\n\nStep 5. Attach a leaf qdisc to the class<\/h2>\n\n\n\n
tc qdisc add \\
dev \"${DEV}\" \\
parent 1:10 \\
sfq<\/pre>\n\n\n\nStep 6. Add filter for priority traffic<\/h2>\n\n\n\n
tc filter add \\
dev \"${DEV}\" \\
parent 1: \\
protocol ip \\
prio 1 \\
u32 \\
match ip dport 22 0xffff \\
flowid 1:10<\/pre>\n\n\n\nTo remove the config from the interface, execute the following:<\/h2>\n\n\n\n
tc qdisc del \\
dev \"${DEV}\" \\
root \\
htb<\/pre>\n","protected":false},"excerpt":{"rendered":"Sometimes you just gotta stop people taking all your bandwidth. Below is the process I used to restrict the speed of data on port 22. Yes scp has a built in limiter, but when people don't respect your authority, you got to break out the big guns. Step 1. Load required kernel modules and set … Continue reading Linux Traffic Shaping<\/span>