系统平台 RedHat AS4
[root@bridgenet software]# uname -a
Linux bridgenet 2.6.9-42.ELsmp #1 SMP Wed Jul 12 23:27:17 EDT 2006 i686 i686 i386 GNU/Linux
[root@bridgenet software]# rpm -ivh bridge-utils-1.0.4-4.i386.rpm
[root@bridgenet software]# rpm -ivh iproute-2.6.9-3.i386.rpm
网桥启动脚本
#!/bin/sh
/usr/sbin/brctl addbr br0
/usr/sbin/brctl addif br0 eth0
/usr/sbin/brctl addif br0 eth1
/sbin/ifconfig eth0 0.0.0.0 promisc
/sbin/ifconfig eth1 0.0.0.0 promisc
/sbin/ifconfig br0 up
TC流量控制脚本
#!/bin/bash
modprobe ip_tables
modprobe ip_nat_ftp
modprobe ip_conntrack
modprobe ip_conntrack_ftp
iptables -F -t nat
iptables -F
#iptables -A INPUT -j ACCEPT
#iptables -A OUTPUT -j ACCEPT
#iptables -A FORWARD -j ACCEPT
#iptables -F -t mangle
#iptables -X -t mangle
#iptables -Z -t mangle
#echo "1" >; /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
## DEV_INTERNET NETWORK DEV_INTERFACE
DEV_IN="eth0"
## DEV_INNER NETWORK DEV_INTERFACE
DEV_OUT="eth1"
#tc qdisc del dev $DEV_OUT root
#tc qdisc del dev $DEV_IN root
tc qdisc del dev ${DEV_OUT} root 2> /dev/null > /dev/null
tc qdisc del dev ${DEV_OUT} ingress 2> /dev/null > /dev/null
tc qdisc del dev ${DEV_IN} root 2> /dev/null > /dev/null
tc qdisc add dev $DEV_OUT root handle 1:0 htb default 10
tc class add dev $DEV_OUT parent 1:0 classid 1:1 htb rate 100Mbps burst 15k
i=2
while [ $i -lt 255 ]
do
tc class add dev $DEV_OUT parent 1:1 classid 1:1$i htb rate 800kbit ceil 800kbit burst 15k
i=`expr $i + 1`
done
i=2
while [ $i -lt 255 ]
do
tc qdisc add dev $DEV_OUT parent 1:1$i handle 1$i: sfq perturb 10
i=`expr $i + 1`
done
U32_ONE="tc filter add dev $DEV_OUT protocol ip parent 1:0 prio 1 u32"
i=2
while [ $i -lt 255 ]
do
$U32_ONE match ip src 10.10.100.$i flowid 1:1$i
$U32_ONE match ip src 10.10.101.$i flowid 1:1$i
i=`expr $i + 1`
done
#IN
tc qdisc add dev $DEV_IN root handle 2:0 htb default 10
tc class add dev $DEV_IN parent 2:0 classid 2:1 htb rate 100Mbps burst 15k
j=2
while [ $j -lt 255 ]
do
tc class add dev $DEV_IN parent 2:1 classid 2:1$j htb rate 800kbit ceil 800kbit burst 15k
j=`expr $j + 1`
done
j=2
while [ $j -lt 255 ]
do
tc qdisc add dev $DEV_IN parent 2:1$j handle 1$j: sfq perturb 10
j=`expr $j + 1`
done
U32_THREE="tc filter add dev $DEV_IN protocol ip parent 2:0 prio 1 u32"
j=2
while [ $j -lt 255 ]
do
$U32_THREE match ip dst 10.10.100.$j flowid 2:1$j
$U32_THREE match ip dst 10.10.101.$j flowid 2:1$j
j=`expr $j + 1`
done
本文转自legendfu51CTO博客，原文链接： http://blog.51cto.com/legendfu/1072266，如需转载请自行联系原作者
