Page 1 of 1

Equal shapping don't work

Posted: Wed Feb 15, 2006 1:04 pm
by paralichko
Hi, my problem is with equal shaping. I have a 768Kbit channel and what to shape it to 5 users. The problem is that if a user download a file with flashget ( no more then 5 connections ) he uses all the bandwith and if another user wants to surf the web he has a slow connection. Conversations via Skype are inpossible. If the second user begin to dowload a file in the begining the speed is terrible but after a 60 - 120 sec. it gets the required speed and the channel is shaped between users. The problem is how to change my configuration, so when a user just ping a site to have equal part of the channel.

Be healthy

Here is my config:

/ queue tree
add name="Download" parent=LAN packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=700000 burst-limit=0 burst-threshold=0 burst-time=0s \
add name="queue2" parent=Download packet-mark=test limit-at=128000 \
queue=pcq-download priority=1 max-limit=700000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="Upload" parent=pppoe-out1 packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=256000 burst-limit=0 burst-threshold=0 burst-time=0s \
add name="queue4" parent=Upload packet-mark=test limit-at=32000 \
queue=pcq-upload priority=1 max-limit=256000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="queue5" parent=Download packet-mark=allp2p limit-at=0 \
queue=pcq-download priority=8 max-limit=256000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="queue6" parent=Upload packet-mark=allp2p limit-at=0 queue=pcq-upload \
priority=8 max-limit=64000 burst-limit=0 burst-threshold=0 burst-time=0s \
0 name="default" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=""

1 name="ethernet-default" kind=red red-limit=40 red-min-threshold=10
red-max-threshold=35 red-burst=10 red-avg-packet=1000

2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514

3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10
red-max-threshold=50 red-burst=20 red-avg-packet=1000

4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514

5 name="pcq-download" kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=1000

6 name="pcq-upload" kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=src-address pcq-total-limit=2000

/ ip firewall mangle
add chain=postrouting out-interface=pppoe-out1 protocol=tcp tcp-flags=syn \
action=change-mss new-mss=clamp-to-pmtu comment="" disabled=no
add chain=forward in-interface=LAN out-interface=LAN \
src-address= dst-address= action=accept \
comment="Da ne slaga opashka na LAN - a" disabled=no
add chain=forward p2p=all-p2p action=mark-connection \
new-connection-mark=p2p_connection comment="Markira P2P" disabled=no
add chain=forward connection-mark=p2p_connection action=mark-packet \
new-packet-mark=allp2p comment="" disabled=no
add chain=forward p2p=!all-p2p action=mark-connection \
new-connection-mark=test-con comment="Markira ostanaloto" disabled=no
add chain=forward connection-mark=test-con action=mark-packet \
new-packet-mark=test comment="" disabled=no

Posted: Wed Feb 15, 2006 6:22 pm
by cyb.0rg
old news :(

Posted: Wed Feb 22, 2006 1:20 am
by AnaG
Have same problem:(
Have someone find solution for this

Posted: Wed Feb 22, 2006 8:59 am
by macgaiver
Try something like this. - make sure that p2p_traffic queue is prior other_traffic queue in the queue list.

/ queue type
add name="pcq_download" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000

add name="pcq_upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000

/ queue simple
add name="total_traffic" interface=lan parent=none priority=8 max-limit=256000/512000

add name="p2p_traffic" interface=lan parent=total_traffic priority=8 queue=pcq_upload/pcq_download limit-at=64000/128000 max-limit=128000/256000 p2p=all-p2p

add name="other_traffic" interface=lan parent=total_traffic priority=4 queue=pcq_upload/pcq_download limit-at=192000/384000 max-limit=256000/512000

Posted: Thu Feb 23, 2006 5:52 am
by AnaG
Done some testing I find that all thing was about using transparent proxy
It's goes like that
Only one pc connected to MT and limit to 128/256
first transparent proxy on , dstnat enabled
when I download file TRAFIK goes like that
1s 600kbps, 2s 2kbps, 3s 3kbps, 4s 400kbps, 5s 230kbps, 6s 1kbps, 7 3kbps, 8s 500kbps ...........

transparent proxy off, dstnat disabled, (no proxy, no cash)
1s 400kb/s, 2s 300 kbps, 3s 260 kbps, 4s 230kbps, 5s 250kbps, 6 240kbps, 7s 260kbps .............

Posted: Thu Feb 23, 2006 10:51 am
by macgaiver
What queue and mangle configuration do you have?

Posted: Fri Feb 24, 2006 1:26 am
by AnaG
ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; P2P
chain=forward in-interface=wlan p2p=all-p2p action=mark-connection
new-connection-mark=p2p_conn passthrough=yes
1 chain=forward connection-mark=p2p_conn p2p=all-p2p action=mark-packet
new-packet-mark=p2p passthrough=yes
2 chain=forward connection-mark=!p2p_conn p2p=all-p2p action=mark-packet
new-packet-mark=other passthrough=yes
3 ;;; ICMP
chain=prerouting in-interface=wlan protocol=icmp action=mark-connection
new-connection-mark=ICMP-connection passthrough=yes
4 chain=prerouting connection-mark=ICMP-connection action=mark-packet
new-packet-mark=ICMP-packet passthrough=yes
5 ;;; FTP
chain=prerouting in-interface=wlan protocol=tcp dst-port=21
action=mark-connection new-connection-mark=FTP-conn passthrough=yes
6 chain=prerouting connection-mark=FTP-conn action=mark-packet
new-packet-mark=FTP-packet passthrough=yes
7 ;;; SMTP -email
chain=prerouting in-interface=wlan protocol=tcp dst-port=25
action=mark-connection new-connection-mark=SMTP-conn passthrough=yes
8 chain=prerouting connection-mark=SMTP-conn action=mark-packet
new-packet-mark=SMTP-packet passthrough=yes
9 ;;; POP3 - email
chain=prerouting in-interface=wlan protocol=tcp dst-port=110
action=mark-connection new-connection-mark=POP3-conn passthrough=yes
10 chain=prerouting connection-mark=POP3-conn action=mark-packet
new-packet-mark=POP3-packet passthrough=yes
11 ;;; MSN
chain=prerouting in-interface=wlan protocol=tcp dst-port=1863
action=mark-connection new-connection-mark=MSN-conn passthrough=yes
12 chain=prerouting connection-mark=MSN-conn action=mark-packet
new-packet-mark=MSN-packet passthrough=yes
13 ;;; Yahoo Games
chain=prerouting in-interface=wlan protocol=tcp dst-port=11998-12000
action=mark-connection new-connection-mark=Yahoo-conn passthrough=yes
14 chain=prerouting connection-mark=Yahoo-conn action=mark-packet
new-packet-mark=Yahoo-packet passthrough=yes
15 ;;; IRC
chain=prerouting in-interface=wlan protocol=tcp dst-port=6667
action=mark-connection new-connection-mark=IRC-conn passthrough=yes
16 chain=prerouting connection-mark=IRC-conn action=mark-packet
new-packet-mark=IRC-packet passthrough=yes
17 ;;; DNS
chain=prerouting in-interface=wlan protocol=tcp dst-port=53
action=mark-connection new-connection-mark=DNS-conn1 passthrough=yes
18 chain=prerouting in-interface=wlan protocol=udp dst-port=53
action=mark-connection new-connection-mark=DNS-conn passthrough=yes
19 chain=prerouting connection-mark=DNS-conn action=mark-packet
new-packet-mark=DNS-packet passthrough=yes
20 ;;; VOIP
chain=prerouting in-interface=wlan protocol=tcp dst-port=19000-20000
action=mark-connection new-connection-mark=VOIP-conn passthrough=yes
21 chain=prerouting in-interface=wlan protocol=udp dst-port=19000-20000
action=mark-connection new-connection-mark=VOIP-conn passthrough=yes
22 chain=prerouting in-interface=wlan protocol=tcp dst-port=5061
action=mark-connection new-connection-mark=VOIP-conn passthrough=yes
23 chain=prerouting in-interface=wlan protocol=udp dst-port=5061
action=mark-connection new-connection-mark=VOIP-conn passthrough=yes
24 chain=prerouting connection-mark=VOIP-conn action=mark-packet
new-packet-mark=VOIP-packet passthrough=yes
25 ;;; HTTP2 secure /Opera, Netscape, etc
chain=prerouting in-interface=wlan protocol=tcp dst-port=443
action=mark-connection new-connection-mark=HTTP2-conn
26 chain=prerouting in-interface=wlan protocol=tcp dst-port=8080
action=mark-connection new-connection-mark=HTTP2-conn
27 chain=prerouting connection-mark=HTTP2-conn action=mark-packet
new-packet-mark=HTTP2-packet passthrough=yes
28 ;;; HTTP /port 80
chain=prerouting in-interface=wlan protocol=tcp dst-port=80
action=mark-connection new-connection-mark=HTTP-connections
29 chain=prerouting in-interface=internet protocol=tcp src-port=80
action=mark-connection new-connection-mark=HTTP-connections
30 chain=prerouting connection-mark=HTTP-connections action=mark-packet
new-packet-mark=HTTP-packet passthrough=yes

queue tree> print
Flags: X - disabled, I - invalid
0 name="prio 8 /P2P1" parent=internet packet-mark=p2p limit-at=5000
queue=default priority=8 max-limit=10000 burst-limit=0 burst-threshold=0
1 name="prio 8 /P2P2" parent=wlan packet-mark=p2p limit-at=5000
queue=default priority=8 max-limit=10000 burst-limit=0 burst-threshold=0
2 name="prio 8 /P2P3" parent=internet packet-mark=other limit-at=16000
queue=default priority=8 max-limit=16000 burst-limit=0 burst-threshold=0
3 name="prio 8 /P2P4" parent=wlan packet-mark=other limit-at=16000
queue=default priority=8 max-limit=16000 burst-limit=0 burst-threshold=0
4 name="prio 2 /ICMP" parent=global-in packet-mark=ICMP-packet
limit-at=64000 queue=default priority=2 max-limit=64000 burst-limit=0
burst-threshold=0 burst-time=0s
5 name="prio 8 /FTP" parent=global-in packet-mark=FTP-packet
limit-at=0 queue=default priority=8 max-limit=512000
burst-limit=0 burst-threshold=0 burst-time=0s
6 name="prio 4 /SMTP" parent=global-in packet-mark=SMTP-packet limit-at=0
queue=default priority=4 max-limit=0 burst-limit=0 burst-threshold=0
7 name="prio 4 /POP3" parent=global-in packet-mark=POP3-packet limit-at=0
queue=default priority=4 max-limit=0 burst-limit=0 burst-threshold=0
8 name="prio 1 /DNS" parent=global-in packet-mark=DNS-packet limit-at=0
queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0
9 name="prio 5 /MSN" parent=global-in packet-mark=MSN-packet limit-at=0
queue=default priority=5 max-limit=0 burst-limit=0 burst-threshold=0
10 name="prio 5 /Yahoo" parent=global-in packet-mark=Yahoo-packet limit-at=0
queue=default priority=5 max-limit=0 burst-limit=0 burst-threshold=0
11 name="prio 3 /HTTP /secure" parent=global-in packet-mark=HTTP2-packet
limit-at=0 queue=default priority=3 max-limit=0 burst-limit=0
burst-threshold=0 burst-time=0s
12 name="prio 5 /IRC" parent=global-in packet-mark=IRC-packet limit-at=0
queue=default priority=5 max-limit=0 burst-limit=0 burst-threshold=0
13 name="prio 6 /VOIP" parent=global-in packet-mark=VOIP-packet limit-at=0
queue=default priority=6 max-limit=0 burst-limit=0 burst-threshold=0

14 name="prio 2 /HTTP" parent=global-in packet-mark=HTTP-packet
limit-at=0 queue=default priority=2 max-limit=0
burst-limit=0 burst-threshold=0 burst-time=0s

every IP is limited like that
name="pc3" target-addresses= dst-address=
interface=wlan parent=none direction=both priority=8
queue=default/default limit-at=0/0 max-limit= 128000/256000

Posted: Sat Feb 25, 2006 4:49 pm
by ponline
Im am also interested to try "Equal bandwidth shaping" as described in MT documentation: ... t#

Does it really work as described there????

Posted: Mon Feb 27, 2006 9:22 am
by macgaiver

1) you can not limit one traffic 2 times in the one place you can use one queue for the traffic in global-in, one in global-out, , one in global-total,one on interface.

2) when you create a simple queue it creates 3 queues - one in global-in, one in global-total, one in global-out

3) you should prioritize traffic before limiting ... flow31.jpg

Prioritize traffic in global-in and global-out, shape traffic on the interface queues