Freesco, NND, CDN, EOS

#!/bin/sh
# shaper.sh -- prosty i łatwy skrypt do zarządzania pasmem
if [ "$1" == "stop" ]
then
    echo "Zatrzymujemy shapera"
    tc qdisc del root dev eth2 2>/dev/null
    tc qdisc del root dev eth0 2>/dev/null
    iptables -t mangle -D POSTROUTING -o eth0 -j MYSHAPER-OUT 2>/dev/null
    iptables -t mangle -F MYSHAPER-OUT 2>/dev/null
    iptables -t mangle -X MYSHAPER-OUT 2>/dev/null
    exit
fi
if [ "$1" == "start" ]
then
# To co było wcześniej -- do pieca! :)
    echo "Uruchamiamy shapera"
    tc qdisc del root dev eth2 2>/dev/null
    tc qdisc del root dev eth0 2>/dev/null
    iptables -t mangle -D POSTROUTING -o eth0 -j MYSHAPER-OUT 2>/dev/null
    iptables -t mangle -F MYSHAPER-OUT 2>/dev/null
    iptables -t mangle -X MYSHAPER-OUT 2>/dev/null
########## DOWNLOAD
    tc qdisc add dev eth2 root handle 1:0 htb
    tc class add dev eth2 parent 1:0 classid 1:1 htb rate 90000kbit ceil 90000kbit
    tc class add dev eth2 parent 1:1 classid 1:2 htb rate 1400kbit ceil 1400kbit
    tc class add dev eth2 parent 1:1 classid 1:3 htb rate 85000kbit ceil 85000kbit
    tc class add dev eth2 parent 1:2 classid 1:4 htb rate 300kbit ceil 1400kbit
    tc class add dev eth2 parent 1:2 classid 1:5 htb rate 300kbit ceil 1400kbit
    tc class add dev eth2 parent 1:2 classid 1:6 htb rate 300kbit ceil 1400kbit
    tc class add dev eth2 parent 1:2 classid 1:7 htb rate 300kbit ceil 1400kbit
    tc filter add dev eth2 protocol ip preference 1 parent 1:0 u32 match ip \
       src 192.168.1.1 flowid 1:3
    tc filter add dev eth2 protocol ip preference 1 parent 1:0 u32 match ip \
       dst 192.168.1.2 flowid 1:4
    tc filter add dev eth2 protocol ip preference 1 parent 1:0 u32 match ip \
       dst 192.168.1.3 flowid 1:5
    tc filter add dev eth2 protocol ip preference 1 parent 1:0 u32 match ip \
       dst 192.168.1.4 flowid 1:6
    tc filter add dev eth2 protocol ip preference 1 parent 1:0 u32 match ip \
       dst 192.168.1.5 flowid 1:7
    tc qdisc add dev eth2 parent 1:3 handle 3:0 sfq perturb 10
    tc qdisc add dev eth2 parent 1:4 handle 4:0 sfq perturb 10
    tc qdisc add dev eth2 parent 1:5 handle 5:0 sfq perturb 10
    tc qdisc add dev eth2 parent 1:6 handle 6:0 sfq perturb 10
    tc qdisc add dev eth2 parent 1:7 handle 7:0 sfq perturb 10
########## UPLOAD
    tc qdisc add dev eth0 root handle 1:0 htb
    tc class add dev eth0 parent 1:0 classid 1:1 htb rate 192kbit ceil 192kbit #quantum 15
    #tc class add dev eth0 parent 1:1 classid 1:2 htb rate 48kbit ceil 48kbit #quantum 16
    tc class add dev eth0 parent 1:1 classid 1:9 htb rate 32kbit ceil 32kbit #quantum 15

    tc class add dev eth0 parent 1:1 classid 1:3 htb rate 40kbit ceil 40kbit #quantum 16
    tc class add dev eth0 parent 1:1 classid 1:4 htb rate 40kbit ceil 40kbit #quantum 16
    tc class add dev eth0 parent 1:1 classid 1:5 htb rate 40kbit ceil 40kbit #quantum 16
    tc class add dev eth0 parent 1:1 classid 1:6 htb rate 40kbit ceil 40kbit #quantum 16
 
   # tc qdisc add dev eth0 parent 1:2 handle 2:0 sfq perturb 10
    tc qdisc add dev eth0 parent 1:3 handle 3:0 sfq perturb 10
    tc qdisc add dev eth0 parent 1:4 handle 4:0 sfq perturb 10
    tc qdisc add dev eth0 parent 1:5 handle 5:0 sfq perturb 10
    tc qdisc add dev eth0 parent 1:6 handle 6:0 sfq perturb 10

    tc qdisc add dev eth0 parent 1:9 handle 9:0 sfq perturb 10



    #tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 20 fw flowid 1:2
 #   tc filter add dev eth0 parent 1:0 protocol ip handle 1 fw flowid 1:9
tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 1 fw flowid 1:9
    tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 21 fw flowid 1:3
    tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 22 fw flowid 1:4
    tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 23 fw flowid 1:5
    tc filter add dev eth0 protocol ip preference 1 parent 1:0 handle 24 fw flowid 1:6

    iptables -t mangle -A OUTPUT -o eth0 -j MARK --set-mark 1
    iptables -t mangle -N MYSHAPER-OUT
    iptables -t mangle -I POSTROUTING -o eth0 -j MYSHAPER-OUT
    iptables -t mangle -A MYSHAPER-OUT -p tcp -s 192.168.1.2 -j MARK --set-mark 21
    iptables -t mangle -A MYSHAPER-OUT -p tcp -s 192.168.1.3 -j MARK --set-mark 22
    iptables -t mangle -A MYSHAPER-OUT -p tcp -s 192.168.1.4 -j MARK --set-mark 23
    iptables -t mangle -A MYSHAPER-OUT -p tcp -s 192.168.1.5 -j MARK --set-mark 24
    iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0 -j MARK --set-mark 20
    exit
fi
if [ "$1" == "status" ]
then
    echo "eth2: "
    tc -s qdisc show dev eth2
    echo "eth0: "
    tc -s qdisc show dev eth0
    exit
fi
echo "$0 start|stop|status"
## KONIEC

#!/bin/bash
BC="/usr/bin/bc"
TC="/sbin/tc"
#tu wpisz, ustawienia łacza
NET_WAN_A="83.xx.xx.xx/29"
IMQ_WAN_A="imq1"
IF_WAN_A="eth0"
BW_IN_A="7700"    #prędkosć łacza w kilobitach/sekundę (w dół) [max 95% !!]
BW_OUT_A="600"   #prędkosć łacza w kilobitach/sekundę (w górę) [max 95% !!]

#ustawienia LANu
NET_LAN="192.168.3.0/16"
IFS_LAN="eth1"
# ograniczenie do NMAC sieciówek w lanie - moze byc w 3dupy :-)
NMAC=200

#tego lepiej nie zmieniaj
RISE_TIME_IN_A="600"
FALL_TIME_IN_A="300"
MIN_IN_A="0.3"
RISE_TIME_OUT_A="600"
FALL_TIME_OUT_A="300"
MIN_OUT_A="0.3"

####################################################################
#PONIŻEJ TEJ LINII NIE ZMIENIAJ, CHYBA, ŻE DOBRZE WIESZ, CO ROBISZ #
####################################################################
#  min       = min
#  incr      = (1.0-min) / RISE
#  speed     =  128 * Bandwidth[kbit]
#  decr1     = (1.0-min)*(1+FALL/RISE)/(FALL*SPEED)
########################################

INCR_IN_WAN_A=`echo "scale=15; (1.0 - ${MIN_IN_A}) / ${RISE_TIME_IN_A}" | ${BC}`
DECR_IN_WAN_A=`echo "scale=15; (1.0 - ${MIN_IN_A}) * ( 1 + ${FALL_TIME_IN_A} / ${RISE_TIME_IN_A}) / (${FALL_TIME_IN_A} * ${BW_IN_A} * 128)" | $BC`
INCR_OUT_WAN_A=`echo "scale=15; (1.0 - ${MIN_OUT_A}) / ${RISE_TIME_OUT_A}" | ${BC}`
DECR_OUT_WAN_A=`echo "scale=15; (1.0 - ${MIN_OUT_A}) * ( 1 + ${FALL_TIME_OUT_A} / ${RISE_TIME_OUT_A}) / (${FALL_TIME_OUT_A} * ${BW_OUT_A} * 128)" | $BC`
REMAP=0
BW_TOTAL=10000
BW_LAN=$[ ${BW_TOTAL} - ${BW_IN_A}]


#Wyczysc wszystkie interfejsy
echo "Czyszczenie ustawien interfejsow"
tc qdisc del root dev ${IMQ_WAN_A} > /dev/null 2>&1
tc qdisc del root dev ${IF_WAN_A} > /dev/null 2>&1
for i in $IFS_LAN; do
    tc qdisc del root dev $i > /dev/null 2>&1
    done



##################################################################
#Ruch wychodzacy                                                 #
echo "${IF_WAN_A} - ruch wychodzacy przez ${NET_WAN_A}"
tc qdisc add dev ${IF_WAN_A} root handle 3000:0 htb default 1001 r2q 5
#Glowna klasa
tc class add dev ${IF_WAN_A} parent 3000:0 classid 3000:1001 htb rate ${BW_OUT_A}Kbit ceil ${BW_OUT_A}Kbit burst 10k quantum 1492
# WRR
echo "tworzenie WRR..."
# utworz $NMAC klas (max tyle sieciowek moze byc max w lanie)
tc qdisc add dev ${IF_WAN_A} parent 3000:1001  handle 8001: wrr sour masq $NMAC $REMAP
#pod wszystkie $NMAC WRR podepnij SFQ
declare -i NUM=$NMAC;
while [ $NUM -ge 1 ]; do
  HNUM=$(printf %X $NUM)
  tc qdisc add dev ${IF_WAN_A} parent 8001:$HNUM handle $HNUM: esfq hash src
  NUM=$NUM-1
done
echo "konfiguracja..."
# Ustaw parametry penalty
tc qdisc change handle 8001 dev ${IF_WAN_A} wrr qdisc wmode1=3 wmode2=3
declare -i NUM=$NMAC;
while [ $NUM -ge 1 ]; do
  HNUM=$(printf %X $NUM)
  tc class change classid 8001:$HNUM dev ${IF_WAN_A} \
    wrr min1=${MIN_OUT_A} max1=1 \
        decr1=${DECR_OUT_WAN_A} incr1=${INCR_OUT_WAN_A} \
        weight1=1.0 \
        min2=${MIN_OUT_A} max2=1.0 \
        decr2=${DECR_OUT_WAN_A} incr2=${INCR_OUT_WAN_A} \
        weight2=0.1
  NUM=$NUM-1
done

#############################################################
#Ruch wchodzacy                                             #
echo "${IMQ_WAN_A} - ruch wchodzacy przez ${NET_WAN_A}"
##############################################################
#kolejka glowna
tc qdisc add dev ${IMQ_WAN_A} root handle 1000:0 htb default 1002 r2q 5
#Glowna klasa
tc class add dev ${IMQ_WAN_A} parent 1000:0 classid 1000:1001 htb rate ${BW_TOTAL}kbit ceil ${BW_TOTAL}kbit prio 1 burst 25k quantum 1492
#Ruch wchodzacy
tc class add dev ${IMQ_WAN_A} parent 1000:0 classid 1000:1002 htb rate ${BW_IN_A}kbit ceil ${BW_IN_A}kbit prio 2
#Ruch  lokalny
tc class add dev ${IMQ_WAN_A} parent 1000:1001 classid 1000:1003 htb rate ${BW_LAN}kbit ceil ${BW_LAN}kbit prio 6
#Ustawienia ruchu lokalnego:
tc qdisc add dev ${IMQ_WAN_A} parent 1000:1003 handle 1010: esfq hash dst perturb 10 # dodaj sfq
# Co jest ruchem lokalnym? Filtry:
tc filter add dev ${IMQ_WAN_A} protocol ip preference 1 parent 1000:0 u32 match ip src \
                   ${NET_WAN_A} flowid 1000:1003   #
tc filter add dev ${IMQ_WAN_A} protocol ip preference 2 parent 1000:0 u32 match ip src \
                   ${NET_LAN} flowid 1000:1003 # ruch po wewn. interfejsach
echo "tworzenie WRRa"
# utworz $NMAC klas (max tyle sieciowek moze byc max w lanie)
tc qdisc add dev ${IMQ_WAN_A} parent 1000:1002  handle 8001: wrr dest ip $NMAC $REMAP
#pod wszystkie $NMAC WRR podepnij SFQ
declare -i NUM=$NMAC;
while [ $NUM -ge 1 ]; do
  HNUM=$(printf %X $NUM)
  tc qdisc add dev ${IMQ_WAN_A} parent 8001:$HNUM handle $HNUM: esfq hash dst perturb 15
  NUM=$NUM-1
done
echo "konfiguracja..."
# Ustaw parametry penalty
tc qdisc change handle 8001 dev ${IMQ_WAN_A} wrr qdisc wmode1=3 wmode2=3
declare -i NUM=$NMAC;
while [ $NUM -ge 1 ]; do
  HNUM=$(printf %X $NUM)
  tc class change classid 8001:$HNUM dev ${IMQ_WAN_A} \
    wrr min1=${MIN_IN_A} max1=1 \
        decr1=${DECR_IN_WAN_A} incr1=${INCR_IN_WAN_A} \
        weight1=1.0 \
        min2=${MIN_IN_A} max2=1.0 \
        decr2=${DECR_IN_WAN_A} incr2=${INCR_IN_WAN_A} \
        weight2=0.1
  NUM=$NUM-1
done
######

echo "no i to wszystko"