Linux Advanced Routing Traffic Control HOWTOBert Hubert. Thomas Graf Section AuthorGregory Maxwell Section AuthorRemco van Mook Section AuthorMartijn van Oosterhout Section AuthorPaul B Schroeder Section AuthorJasper Spaans Section AuthorPedro Larroy Section AuthorA very hands on approach to iproute. Table of Contents. Dedication. 2. Introduction. Disclaimer License. Prior knowledge. 2. What Linux can do for you. Kak-vklyuchit-Debug-View-v-konsoli-Configuration-Manager-2012-R2-09.png' alt='3Com Local Configuration Manager Download' title='3Com Local Configuration Manager Download' />Housekeeping notes. Access, GIT submitting updates. Mailing list. 2. 7. Layout of this document. Introduction to iproute. Why iproute. 2 3. Prerequisites. 3. Exploring your current configuration. IP addresses. 3. 4. ARP4. Rules routing policy database. Simple source policy routing. Routing for multiple uplinksproviders. Split access. 4. 2. TranscndQCM3.gif' alt='3Com Local Configuration Manager Download' title='3Com Local Configuration Manager Download' />Sheet1 Newly Added Applications Hist KnownIssues STV Name Changes Windows Newly Added Catalog Acronis Inc. Adobe Systems Incorporated Apple Computer Inc. List of well known, registered, and dynamicprivate ports. Device Id Chip Description Vendor Id Vendor Name 0x002F Spitfire VGA Accelerator 0x0033 Paradyne Corp. Spitfire VGA Accelerator 0x0033 Paradyne Corp. Com Corporation was a digital electronics manufacturer best known for its computer network products. The company was founded in 1979 by Robert Metcalfe, Howard. Load balancing. 5. GRE and other tunnels. A few general remarks about tunnels 5. IP in IP tunneling. GRE tunneling. 5. IPv. 4 Tunneling. IPv. 6 Tunneling. Userland tunnels. IPv. 6 tunneling with Cisco andor 6bone. IPv. 6 Tunneling. IPSEC secure IP over the Internet. Intro with Manual Keying. Automatic keying. Theory. 7. 2. 2. Example. Automatic keying using X. IPSEC tunnels. 7. Free HewlettPackard MIB Database Download, Search, and Upload MIBs Download HewlettPackard SNMP MIBs for Free. This particular page contains a full list of all. Com Local Configuration Manager Download' title='3Com Local Configuration Manager Download' />Other IPSEC software. IPSEC interoperation with other systems. Windows. 7. 5. 2. Check Point VPN 1. NG8. Multicast routing. Queueing Disciplines for Bandwidth Management. Queues and Queueing Disciplines explained. Simple, classless Queueing Disciplines. Token Bucket Filter. Stochastic Fairness Queueing. Advice for when to use which queue. Terminology. 9. 5. Classful Queueing Disciplines. Flow within classful qdiscs classes. The qdisc family roots, handles, siblings and parents. The PRIO qdisc. 9. The famous CBQ qdisc. Hierarchical Token Bucket. Classifying packets with filters. Some simple filtering examples. All the filtering commands you will normally need. The Intermediate queueing device IMQ9. Sample configuration. Load sharing over multiple interfaces. Caveats. 10. 2. Other possibilities. Netfilter iproute marking packets. Advanced filters for re classifying packets. The u. 32 classifier. U3. 2 selector. 12. General selectors. Specific selectors. The route classifier. Policing filters. Ways to police. 12. Overlimit actions. Examples. 12. 4. Hashing filters for very fast massive filtering. Filtering IPv. 6 Traffic. How come that IPv. Marking IPv. 6 packets using ip. Using the u. 32 selector to match IPv. Kernel network parameters. Reverse Path Filtering. Obscure settings. Generic ipv. 41. 3. Per device settings. Neighbor policy. 13. Routing settings. Advanced less common queueing disciplines. Parameters usage. Clark Shenker Zhang algorithm CSZ1. DSMARK1. 4. 3. 1. Introduction. 14. What is Dsmark related to Differentiated Services guidelines. Working with Dsmark. How SCHDSMARK works. TCINDEX Filter. 14. World Of Warcraft Gold Guide To Burning Crusade Map. Ingress qdisc. 14. Parameters usage. Random Early Detection RED1. Generic Random Early Detection. VCATM emulation. Weighted Round Robin WRR1. Cookbook. 15. 1. Running multiple sites with different SLAs. Protecting your host from SYN floods. Rate limit ICMP to prevent d. Do. S1. 5. 4. Prioritizing interactive traffic. Transparent web caching using netfilter. Traffic flow diagram after implementation. Circumventing Path MTU Discovery issues with per route MTU settings. Solution. 15. 7. Circumventing Path MTU Discovery issues with MSS Clamping. ADSL, cable, PPPo. E PPt. P users1. The Ultimate Traffic Conditioner Low Latency, Fast Up Downloads. Why it doesnt work well by default. The actual script CBQ1. The actual script HTB1. Rate limiting a single host or netmask. Example of a full nat solution with Qo. S1. 5. 1. 0. 1. Lets begin optimizing that scarce bandwidth. Classifying packets. Improving our setup. Making all of the above start at boot. Building bridges, and pseudo bridges with Proxy ARP1. State of bridging and iptables. Bridging and shaping. Pseudo bridges with Proxy ARP1. ARP Proxy ARP1. Implementing it. Dynamic routing OSPF and BGP1. Setting up OSPF with Zebra. Prerequisites. 17. Configuring Zebra. Running Zebra. 17. Setting up BGP4 with Zebra. Network Map Example1. Configuration Example1. Checking Configuration. Other possibilities. Further reading. 20. Acknowledgements. Chapter 1. Dedication This document is dedicated to lots of people, and is my attempt to do. To list but a few. Rusty Russell. Alexey N. Kuznetsov. The good folks from Google. The staff of Casema Internet. Chapter 2. Introduction. Welcome, gentle reader. This document hopes to enlighten you on how to do more with Linux 2. Unbeknownst to most users, you already run tools which allow you to. Commands like route and. I hope that this HOWTO will become as readable as the ones by Rusty Russell. You can always reach us by posting to the mailing list see the relevant. HOWTO. We are no free helpdesk, but we often will answer questions. Before losing your way in this HOWTO, if all you want to do is simple. Other possibilities chapter, and read about CBQ. This document is distributed in the hope that it will be useful. WITHOUT ANY WARRANTY without even the implied warranty of. MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. In short, if your STM 6. Sorry. Copyright c 2. Gregory Maxwell, Martijn van. Oosterhout, Remco van Mook, Paul B. Schroeder and others. This material may. Open Publication License, v. Please freely copy and distribute sell or give away this document in any. Its requested that corrections andor comments be forwarded to the. It is also requested that if you publish this HOWTO in hardcopy that you. As the title implies, this is the Advanced HOWTO. While by no means rocket science, some prior knowledge is assumed. Here are some other references which might help teach you more. Rusty Russells networking concepts HOWTOVery nice introduction, explaining what a network is, and how it is. Linux Networking HOWTO Previously the Net 3 HOWTOGreat stuff, although very verbose. It teaches you a lot of stuff. Internet. Should be located in usrdocHOWTONET3 4 HOWTO. A small list of things that are possible Throttle bandwidth for certain computers. Throttle bandwidth TO certain computers. Help you to fairly share your bandwidth. Protect your network from Do. S attacks. Protect the Internet from your customers. Multiplex several servers as one, for load balancing or. Restrict access to your computers. Limit access of your users to other hosts. Do routing based on user id yes, MAC address, source IP. Currently, not many people are using these advanced features. This is for. several reasons. While the provided documentation is verbose, it is not very. Traffic control is almost undocumented. There are several things which should be noted about this document. While I. wrote most of it, I really dont want it to stay that way. I am a strong. believer in Open Source, so I encourage you to send feedback, updates. Do not hesitate to inform me of typos or plain old errors. If my English sounds somewhat wooden, please realize that Im not a native. Feel free to send suggestions. If you feel you are better qualified to maintain a section, or think that. The SGML. of this HOWTO is available via GIT, I very much envision more people. In aid of this, you will find lots of FIXME notices. Patches are always. Wherever you find a FIXME, you should know that you are treading in. This is not to say that there are no errors elsewhere. If you have validated something, please let us know so. FIXME notice. About this HOWTO, I will take some liberties along the road. For example, I. postulate a 1.