Slashdot Mirror


Ask Slashdot: Low Cost IP-based Traffic Shaping?

Deuteron asks: "Hi! I work for an ISP and we're about to deploy wireless net access and need a way to limit people to the bandwidth they pay for. We're planning on starting out with offering 128k, 256k, and 1M links. The wireless hardware itself (Breezecom if you're interested) will handle the 1M part for us. The tricky part is the lower speeds. I've done some extensive checking and haven't found any IP or MAC address based shapers as of yet. Can anyone point me to some free or extremely low cost solutions? Any leads would be greatly appreciated!"

109 comments

  1. Pricing by Anonymous Coward · · Score: 0

    Has anyone seen pricing on these devices? I have been thinking of getting a T1 to the home and wiring a few neighbors to cover costs. This would be a better solution. We are tired of 10k/s RR cable modems and ADSL d/c's.

    1. Re:Pricing by Anonymous Coward · · Score: 0

      the wireless bridge is about $2k and then each of the clients is from $400 -$1500 + antennas

    2. Re:Pricing by Anonymous Coward · · Score: 0

      I paid $5 for over a dozen ISA 915MHz WaveLAN cards. They're the non-IEEE ones, but who cares. I have also obtained some IEEE 2.4GHz WaveLANs for $11 each. Look around, the stuff is out there.
      I also paid $5 a piece for four Cylink Airlink 64s. 64k, but hey they have 800mW of power output. Sure the WaveLANs are weak, but that doesn't mean they are unusable. Directive systems (www.directivesystems.com) sells some nice 47 element yagis for 900MHz at around $160 each I think it is. An amplifier for the WaveLANs would really help, but it looks like you're on your own their since the only amplifiers I have seen run about $600-4500 which is truly a rip. I've been toying with the idea of using a mobile phone power amplifier module. I've found a few that will work in the 900MHz ISM band.

      snock
      snock@solderjoint.dhs.org

  2. Re:A suggestion by Anonymous Coward · · Score: 0

    Try telling that to customers paying for 1M access when you have users only paying a fraction of the price for 256K and getting the same services because the system isn't overloaded. This would also kill your ability to judge the limits of the system when you have all your slower connections connecting at top speed and coming near to your bandwidth limit when you should only be hitting 50%.

  3. Re:A suggestion by Anonymous Coward · · Score: 0

    You can do that, and make your customers happy - but then why would any of them buy the 1M connection? Word will get around and suddenly you'll have everyone on 128K connections, using 1M.

    Not a great way to make a profit.

  4. Linux 2.2.x by Anonymous Coward · · Score: 0

    Download Linux 2.2.x, and when you compile it, enable experimental and look at the QoS stuff. It does exactly what you need.

  5. Re:Breezecom by Anonymous Coward · · Score: 0

    > If you want to limit traffic, then I personally would do it at the router level.
    > Doing it at a OS level (like linux) is even worse.

    No, the idea is to use Linux _as_ a router.

  6. Sorta related... by Anonymous Coward · · Score: 0

    These features in the 2.2.x series that allow "shaping" - would they be useful to the end user trying to juggle various connections over, say, a PPP link? Right now it is basicly impossible for me to browse web pages while FTPing a file. I'd love to some how give my web browser priority over my FTP client. Anyone know if this sort of tweaking is possible?

    1. Re:Sorta related... by replica · · Score: 3

      Check out the IPChains HOWTO. You can implement TOS scheduling in your chain.

    2. Re:Sorta related... by elsewhere · · Score: 1

      You can do this with QoS features in the 2.2 kernels. Just read the ipchains homepage (somewhere in the docs, you'll figure out) and see how you can assign different strategies when queueing different types of IP packets.

  7. Re:LWN Article by Anonymous Coward · · Score: 0

    It seems to me that he could limit his bandwidth going out using this, however he couldn't limit the amount of bandwidth coming in.

  8. Re:LWN Article by Anonymous Coward · · Score: 0

    Actually it's pretty simple. On incoming data to an IP address you add in a slight delay. This will lower the data rates.


    Ever FTPed to an overworked subnet?

    Granted it might take a while to get the delay factor correct without losing connections.

  9. Try picobsd+dummynet by Anonymous Coward · · Score: 0

    Se simplest/small solution is to build
    a picobsd floppy with dummynet support
    in the kernel,pipes are configured as follows:

    ipfw pipe NNN config bw B delay D queue Q plr P

    where the bandwidth B can be expressed in bit/s, Kbit/s, Mbit/s, Bytes/s,
    KBytes/s, MBytes/s , delay in milliseconds, queue size in packets or
    Bytes, plr is the fraction of packets randomly dropped.

    after that you just use ipfw to define:

    ipfw add pipe 1 tcp from any to server 80 in via de0
    ipfw add pipe 1 tcp from server 80 to any out via de0

    1. Re:Try picobsd+dummynet by Brew+Bird · · Score: 1

      Does BSD ipfw support filtering based on IP TOS?

  10. Re:A suggestion by Anonymous Coward · · Score: 0

    The suggestion of allowing customers full use of the bandwidth, assuming they are not taking away bandwidth from users paying for more bandwidth, has been done before and exists today in frame relay. It just means that at certain times the available bandwidth for some users will be cut back to their respective level and others won't.

  11. Re:Breezecom - THE RIGHT URL IS HERE... by Anonymous Coward · · Score: 0

    hey,
    Sorry about all that, its http://www.c-spec.com
    Don't you just love the internet now days, you type random numbers, and you probally get either a porn site, or someone trying to sell your something.

    (not in this case, but in most cases...)

    --azop
    "I shot an arrow in the air, where it lands I know not where"
    The way space should be looked at.

  12. Re:Wireless vs Wired T1/Southern California by Anonymous Coward · · Score: 0

    Depends on how far you need to go. I'd suggest the Cylink (now P-Com) T1/E1 products. I have some of their lower speed models and they are very nice. Basically they are spread spectrum radios with a V.35 interface that connects up to a router nicely. Go with the higher frequencies if you can see the other end from the antenna mount point. The 5.8GHz devices are a good choice for LOS paths, otherwise I would have to suggest the 900MHz devices for non-LOS. It is possible to have these work over non-LOS paths but for any distance (say 5-6 miles or so) you're going to need some high gain yagi antennas.

  13. www.packeteer.com by Anonymous Coward · · Score: 0

    check out www.packeteer.com. This will do what you need it to do, although its not free/cheap.

  14. Re:Wireless vs Wired T1/Southern California by Anonymous Coward · · Score: 0

    ...and him setting up his own wireless T1 is much cheaper than you.

  15. Re:Sounds inefficient by Anonymous Coward · · Score: 0

    That's assuming that he's using one base unit and several remote units attached to it. If he is smart, has the ooney, and buys one base per remote, then it's prefectly fine.

  16. 1500/month a LITTLE much???? by Anonymous Coward · · Score: 0

    Wow... California must pay better than Texas

    1. Re:1500/month a LITTLE much???? by daviddennis · · Score: 1

      Right now, I spend $ 1,500 a month to rent office space including a shared 10mbps line, with my share being roughly a T1.

      Unfortunately, the company leasing me the space is likely to go out of business within the next 6 months or so, so I'm trying to figure out my alternatives. The best one is probably to pipe a T1 into my home, but I'd like to save a few bucks doing it.

      I've been doing computer consultancy/software development for over fourteen years, so you might want to compare apples to apples income-wise. It's also a matter of priorities - I really, really want high-speed Internet access to the home.

      D

      ----

    2. Re:1500/month a LITTLE much???? by daviddennis · · Score: 1

      Actually, my current apartment rent is $ 595 a month, for an incredibly boring place in a really boring (but safe) part of the Valley.

      To be in the Westside where all the action is, you can pay $ 900 a month and live in a decaying slum-like apartment. I know, because I checked.

      Fortunately, lower interest rates make houses not that far away. My mid to high five figure income can probably qualify me to buy a low to mid-end house. The cheapest single family house in a dismal area of the Valley is $ 100,000. Houses start getting dull but civilized around $ 200,000. For $ 400,000, you can live in eastern Malibu in a small but pleasant place with a partial ocean view. For $750,000 you can get a magnificent view of the ocean in Malibu with no land but what your house is sitting on. For $ 650,000 you can get a shack-like home on the beach. For $ 1,000,000 you can get a little land plus your spectacular view. For $ 3,995,000 you can get something pretty impressive. The most expensive home in Malibu is around $ 20 million.

      I'm contemplating the purchase of a house, partially as an investment, partially for tax reasons, but mainly because a nice apartment costs about the same a month as a decent house.

      I understand that these prices are bargain city compared to Silicon Valley's.

      D

      ----

    3. Re:1500/month a LITTLE much???? by dark3r · · Score: 1

      It has to. What you might pay $500 to $600 here for an apartment, its almost double that in most areas of California. And don't even think about buying a house in either Los Angeles, San Jose, or San Francisco. Unless of course you make in the high 6 to 7 figures a year.

  17. Doesn't Linux Router Project Do This? by Anonymous Coward · · Score: 0

    I thought the latest versions of LRP do this.

    "It's in there"

    Jim Burnes

  18. Bandwith limits... by Anonymous Coward · · Score: 0

    Sure you can limit in the upstream and downstream to the internet, but unless you have hardware which supports bandwidth limits it won't work. First off all clients will have the ability to TX and RX at 1Mbps and can still saturate the channel you are using (I'm assuming 2.4GHz here). The hardware on the client end would need some sort of speed selection otherwise it really doesn't matter. Of course if it's the internet side of things you are worried about getting congested then a traffic shaper will be of some use here, but to me the biggest problem will be on the radio end. The only real suggestion I can offer would be to get new hardware that supports speed options. That's really the only way to do it and have it work well. I seriously doubt that this hardware currently exists, at least commercially. There are some cards that are speed selectable, but the problem is you need both ends to run at the same rate. Unless you put up seperate nodes for each class of bandwidth you are after that's not going to work either. I personally think commercial wireless internet services suck only because they tend to ruin the band for others. A large subscriber base would certainly do this.

  19. DO NOT USE SHAPER! by Anonymous Coward · · Score: 0

    Dont use shaper! use CBQ! It's new in 2.2 and does all that shaper does and much more. The only problem with CBQ is documentation, or rather, the lack thereof. But it isn't that hard...

    Linux's CBQ can do more then routers and more then a lot of traffic shapping devices. It will handle the kinds of loads you are talking about with ease (I use 21264 systems to do fair queue and priorit on multiple 100Mb's streams)..

  20. Re:LWN Article by Anonymous Coward · · Score: 0

    TCP/IP has some build in flags, which indicate what this packet wants (low latency or high bandswidth), so you could delay packets when a user close to his limit, and delay only those things like FTP traffic leaving Quake packets intact. Problem here is that poorly designed games don't set these bits. In is also a way out to drop packets completely ;)

  21. Re:Bandwidth Limiting. by Anonymous Coward · · Score: 0

    ...not like @Home or AOL would ever deem pedophilia as inproper use or abuse :)

  22. Fscking server limitations, make them clarify it by Anonymous Coward · · Score: 0

    Or would you like to be sued because you were using mIRC? It has an ident server (BTW, it's _standard_ on Unix-like systems too, so prohibiting it should be wrong). It also has a DCC server (doesn't matter that it uses the client connection you have open, it's a server). And I believe the ICQ client has some builtin servers too.

  23. Breeze Access by Anonymous Coward · · Score: 0

    I'm looking at the BreezeAccess sales slander right now.

    Looks pretty impressive, offering:

    CIR
    MIR
    QoS
    VLAN
    RADIUS (auth and billing)
    H.323 VoIP
    Sectored Antennas
    High Density (700 simultanious users per site)
    5km to 15km coverage
    1 to 3 mbps customer end
    54mbps aggergrate bandwidth per access point
    and
    all in the unlicense 2.4ghz spectrum.

    Now, it all depends on how low they can get their cost per customer end unit (sales stuff say "low cost", but we all know that means unaffordable for joe-six pack in the wireless world).

    This could be the next best thing since sex.

    Does anybody have more information????

  24. Re:FreeBSD solution by Anonymous Coward · · Score: 0

    Wow, that was a great piece of advice ! "Buy a Dell". I wonder if you ever bought one of their PCs or if you only read their ads ? If you need an expensive, poorly designed and ever crashing machine (we had 20 of them at the office, but had to replace half of them), yeah you should buy a Dell. Thanks for your nice advice, Chris!

  25. Re:Neato, but what does the FCC think???? by Anonymous Coward · · Score: 0

    Honestly who cares. I've known people who consistently run 1.2kW to 3kW on CB radio where the maximum power output is 4W. It's not really a big deal. It would cost the FCC so much to do massive "oh my god, you're running 5W on ISM, nieghborhood scans" and also be very hard to do in the first place. The antenna regulation is a joke. To be honest I think this sort of stuff comes around because of telcos and such. They don't want you to be able to communicate at high speeds without paying. I say everyone should startup or get involved in some sort of free community networking. 1W is probably OK for most situations, but not all the time. As a side note here, 902-928MHz is also a amatuer radio band as well. Hams aren't restricted to 1W. I'd also like to add that the military may use this band, although I don't know why they'd want to, at high power levels. What I'm trying to say here is, that if say 500mW over the limit, or a higher gain antenna is what is keeping you from setting up a RF link, then I know what direction I would be leaning in.

  26. Re:Cisco CPU cycles aren't cheap! by Anonymous Coward · · Score: 0

    Also you might want to look into differnt switching types, such as netflow switching. Although netflow adds some overhead for things like stats gathering, it also becomes more efficent if you are going to have a large access list on an interface because it only matches the first packet in a data stream against the list, and if it passes allows the rest. Check out the CCO doccumentation for the gorey details.

    The only disadvantage is that, I believe, it requires a 7200+ platform to run it on. But you'd probably have at least that as a core/backhaul router to your upstream if you're backhauling with much more than 4xT1.

  27. Re:Maturity of Linux and so on by Anonymous Coward · · Score: 0

    Well... (not an anonymous coward, just forget my password - i'm hazard)

    2.2 is _not_ a development kernel. Its a stable release.

    Its up to you to decide to not trust Linux on a critical server, but it doesn't mean that your decision is right.

    Linux _CAN_ be trusted. 350+ day uptimes on several of boxes I administer prove that. And QoS works fine, and its free, and under GPL. Most recommendations for BSD is to use ET/BWMGR, which is whopping $500 !! (not speaking that it comes without source)

    Please, let's compare systems from a technical point of view! What I see is that most BSD opponents seem to insist that Linux is unstable and thats all. Where's the proof?

  28. FreeBSD's Dummynet by Anonymous Coward · · Score: 0

    Hi,

    I've been working with BreezeCom units myself, for the same reason. We too wanted to do trafic shaping, for all the obvious reasons. I first tried the Linux driver, but it was not accurate, had poor performance and I had to hack the driver myself. All of that might have changed since I tried it, but I still went with FreeBSD's dummynet. It's part of the firewall, so you get full controll. You can limit bandwith based on IP, port or whatever you'd like. People tend to like the port limiter, as you can say "this ip can use 50k for web, and as much as it's like for other stuff, but combined it can not exceed 100k". That will make sure you cannot use more than 50k for telnet, and a maximum of 100k. Thus you can use f.eks 90k for ftp if there's little web trafic (10k).

    Just some examples.

    Oh, and you should really look at FreeBSD's cbq too :)

    (if you want to talk to me about this, please mail me at delta@xti.org)

    1. Re:FreeBSD's Dummynet by Anonymous Coward · · Score: 0

      You can do the same using Linux, of course.
      Firewall- or route- or TOS-based classification of
      packets, CBQ, simple bandwidth limiting (TBF),
      and, of course various styles of packet dropping
      in time of overload (RED, WFQ, CSZ etc).
      There are some documents on this (for example
      Werner Almesberger's paper on traffic shaping
      in Linux kernel).

      -Yenya

  29. Breezecom does it natively by Anonymous Coward · · Score: 0
    Not wanting to point out the obvious, but did anyone stop to think that Breezecom themselves might have already done this?


    I know for a fact that the ability to set MIR/CIR/BURST parameters is on its way RSN.


    (I've seen beta code and yes, it works well).

  30. Wireless network cards by Anonymous Coward · · Score: 0

    I only hear about breezecom.
    But how about lucent's WaveLAN?
    Or any other brands...

  31. Re:FreeBSD solution by Anonymous Coward · · Score: 0

    You're wrong,
    BSD tcp/ip stack doesn't outperform linux one,
    The proof of that is that BSD use 2 copies by packet ( with BPF use ) since LINUX just do 1 copy.

    LINUX tcp/ip stack outperform BSD one.

  32. Bandwidth Limiter and traffic shaper by Anonymous Coward · · Score: 0

    You can use FreeBSD with ipfw and dummynet
    it'll do what you need to do

    http://www.freebsd.org

  33. What about Qos - Guaranteeing bandwidth by Anonymous Coward · · Score: 0

    A lot of the tools discussed can be used to limit the maximum bandwidth used by a link. But can they be used to specify and minimum bandwidth on a link?
    If you have a 1mb/s pipe to the 'net and have several machines using that link but you want to guarantee service for some applications, e.g. guarantee at least 64kb/s for real video applications. So that when someone has got a large ftp job on (e.g. downloading a Unix distribution) it doesn't destory the link for other services.

  34. Re:FreeBSD solution by Anonymous Coward · · Score: 0

    You're an idiot. Period. End of thread.

  35. Re:Neato, but what does the FCC think???? by Anonymous Coward · · Score: 0

    Spread spectrum doesn't have as many problems in the areas that you mention, mulitpath distortion, etc. than your typical narrowband dataradios. Building a small CSMA amplifier may be easier than you think. There are many amplifier IC modules designed specifically for this. I've seen some that would work with just 3 external components. You're right though, higher gain antennas and low power are much better than low gain+high power. Why waste the power when you don't need it. Sure i'd be pissed if someone was pumping 25W just to go 5 miles, but I don't really feel that going over the limit just a little is something to be concerned about.

  36. Wrong by Anonymous Coward · · Score: 0

    A client transmitting faster then he is allowed will have his packets dropped. TCP will then back off and slow down. If they are transmitting something without congestion control, it will lose packets and not work right.

  37. Yep. by Anonymous Coward · · Score: 0

    Create a CBQ node for each one and filter into them with u32.

  38. Re:Class based queueing under 2.2.x by Anonymous Coward · · Score: 1

    Oops!!! That's CBQ.init that you search for at Freshmeat. And you also need to pick up the IProute2 package to get it all working.

  39. Class based queueing under 2.2.x by Anonymous Coward · · Score: 2

    We are doing this exact thing to offer internet service to several companies off of out T-1 connection. Class based queueing works much better than the traffic shaper. To use it, get the cbqinit script off of Freshmeat, and turn on the experimental stuff under the 2.2.x kernels to enable class based queueing. After you do this, sizing the traffic is as easy as editing a text file to mandate bandwith on a per network or per class basis. It is much easier to configure and in my opinion shapes the traffic much better than the traffic shaper.

    darkdave@uwyo.edu

  40. Full bandwidth does cost you by gavinhall · · Score: 1

    Posted by Vik Olliver (at home):

    It depends on which country you are in. New Zealand for instance has a per Mb charge for overseas traffic.

    Vik :v)

  41. Re:Cisco CPU cycles aren't cheap! by davew · · Score: 1

    Performing it straight on an interface shouldn't hurt too much - although I gotta admit, I've got no numbers to back me up here.

    Matching per IP address is rather CPU intensive though, according to the documentation.

    Dave


    --

  42. Do it at the router by davew · · Score: 2

    [These links are long. If they get broken, go to www.cisco.com and search for "Committed Access Rate".]

    Some of the more interesting versions of the Cisco IOS (the 11.1CA and CC tree I think, and v12 if you're feeling brave) will perform incoming and outgoing traffic shaping. The closest to what you'd like is probably Committed Access Rate.

    It can be applied directly to an interface to limit all IP traffic, or you can define an access list so that it will limit all traffic that matches a particular protocol, QOS flag... or your customer's IP subnet.

    This last option is useful to limit a customer's access to the internet at large while still giving them full speed access to, say, your local mail or FTP server. You perform the limit on your connection to the rest of the world, using a different rate limit for each customer.

    The v12.0 documentation is linked above, or check this CCO search.

    Dave


    --

  43. Re:A suggestion by Dave+Fiddes · · Score: 1

    AFAICS Breezecom offer wireless E1(or T1) links which are synchronous....

  44. Re:FreeBSD solution by pb · · Score: 1

    Ah, a code bigot.

    I agree with you that the original code has been around forever, and that that might make it more stable... But this argument doesn't necessarily hold. Sendmail has been around forever too, but it's never been stable. Linux hasn't been around forever, but I've never had a problem with any kernel TCP/IP code.

    In fact, the only kernel code I have a problem with is any new, contributed, unimportant features. I don't care if my cheap TV card doesn't work properly with my cheap video card as long as I have a working ethernet connection over my cheap ethernet card... :)

    I don't think the Linux TCP/IP stack is a new, experimental, or partially working feature. Even if someone changed a few lines of code, that's why the development model works the way it does. Maybe if it had a problem in 2.1.1xx, it got fixed by 2.2.1, eh? That's what code freeze and stable version means.

    Anyhow, if you're all gung-ho about using a "stable version", use a distribution based off of 1.2.13, or 2.0.36 or something. Or use XENIX, a true SYSV derivative. ;) But don't talk about stability problems that don't exist because you think a particular branch of code is better, but don't have proof. That's bigotry.

    --
    pb Reply or e-mail; don't vaguely moderate.
  45. Re:A suggestion by RobKow · · Score: 2

    The Breezecom stuff is directional point-to-point, and not shared, so it's perfectly safe to sell the whole bandwidth of a connection.

  46. powerful QoS is already in 2.2.x kernel by hazard · · Score: 1

    It is not very known, but sophisticated QoS and
    bandwidth limiting is available in 2.2. Try going to Networking options->QoS and fair queuing in kernel configuration and I'm sure you'll see lots of options with hard-to-understand descriptions ;)


    For the software and docs, go to ftp://ftp.proxad.net/mirrors/ftp.inr.ac.ru/ip-rout ing/ and download latest iproute from there.

  47. powerful QoS is already in 2.2.x kernel by hazard · · Score: 1

    It is not very known, but sophisticated QoS and
    bandwidth limiting is available in 2.2. Try going to Networking options->QoS and fair queuing in kernel configuration and I'm sure you'll see lots of options with hard-to-understand descriptions ;)

    For the software and docs, go to ftp://ftp.proxad.net/mirrors/ftp.inr.ac.ru/ip-rout ing/ and download latest iproute from there.

  48. Maturity of Linux and so on by hazard · · Score: 1

    First of all, as far as I remember bwmgr is available for Linux now as well.

    Secondly, I use Linux 2.2 and QoS on several routers, with not-so-good hardware. How unmature it may be, it works.

    And finally, I think you do advocacy in a wrong way. I dont have anything *BSD, but advocacy like this doesn't encourage me to try it. If you wrote a couple of advantages of what FreeBSD has now and how do you use IMHO it would give a much better effect.

    1. Re:Maturity of Linux and so on by sirket · · Score: 1

      I do not understand why Linux users insist on arguing when a *BSD user says a particular feature is better in in a *BSD than in Linux.

      While Linux has excellent support, a lot of apps, a runs on a ton of hardware there are areas where the BSD derivatives are better. 1 of which is the TCP/IP stack (As admitted by a number of Linux kernel developers) and another area is in applications related to ISP's as that has been an important niche for FreeBSD especially.

      I wish the Linux users would focus on making Linux better instead of jumping down *BSD users throats any time they point out an area where a BSD is better.


      And as for reliability... it will be a long time before I trust Linux in a critical server and I will never trust a development kernel on a critical server. The same holds true for the *BSD's... Development kernels are not for production use and anyone who thinks otherwise has no concept of what business is about.


      -ket

  49. IP Shaping by negativ · · Score: 1

    As I recall this a kernel feature in Linux now, in the 2.2.x series...please correct me if i am mistaken...I have not seen any information on implementing this however...

    --
    The Terminus Group / Jeep Geekgirl (o)|||(o)
  50. Similar Project in UK - Shameless Plug by Rob+the+Roadie · · Score: 1
    Here at PC Resource.Net we are in the process of rolling out a wireless radio data network with the sole purpose of supplying fast and cheap internet connections.
    Having read all of the above comments I feel that I should let you know how we are doing it here.
    Initially, all connections will be run as fast as the network can run. ie a 128k link will run as fast as a 1mb link until we have enough customers to justify an upgrade of our central router.
    We then plan the following:-

    The faster connections (512k+) will all be managed at router side using the CIR functions with static information.

    The slower (64k - 256k)connections will all be managed through bandwidth limiting on our Linux boxes.
    I am happy to provide any further information as required.

  51. See Linux-2.2.x by maynard · · Score: 4

    See the traffic shaper pseudo device support in Linux-2.2.x. According to it's documentation it can shape from about 9600 to 256kb per pseudo-device. Documentation lives at:
    /usr/src/linux/Documentation/networking/shaper.t xt

    You might also want to look into the Linux Firewalling code if you're going to use it for traffic shaping as well. See:

    filter and ipmasq.txt in the same directory.

    Cheers!
    J. Maynard Gelinas

  52. A suggestion by stevelinton · · Score: 1

    You only actually need to choke the users down to what they've paid for when there is actual contention. If you let them have the full capabilities of the hardware the rest of the time, it costs you nothing and can only make them happier.

    1. Re:A suggestion by Wag+the+Dog · · Score: 1

      Think Frame Relay.

      Limit the burst rate to 150% of the "CIR" or whatever the customer is paying for. That would keep the users "happy."

      I don't know the breezecom stuff, but if it can't handle much more than 1Mb then I wouldn't sell that speed. Wireless is a shared technology. Unless you can garentee that they will always be able to get 1Mb at a minimum then I would bump the top speed you "sell" to maybe 512Kb and let them burst to 150%, or 768Kb.

    2. Re:A suggestion by Helge+Hafting · · Score: 1

      You can do that, and make your customers happy - but then why would any of them buy the 1M connection? Word will get around and suddenly you'll have everyone on 128K connections, using 1M.

      Easy. Those who pay for 1M will always get 1M (the money pays for necessary equipment) If "word gets around" then the service becomes so popular that it gets overloaded, and those who didn't pay for 1M suddenly fall down to the 128k they paid for. Those who paid for 1M still have 1M of course. Those who paid for cheap 128k and got addicted to 1M now seriously think of upgrading their service to 1M...

      Also, allowing people to use spare capacity will spread the load more, utilizing the equipment better. Geeks will use the service at odd hours in order to get better bandwith cheaply. If they have to pay to get more even in low-load situations then they may do so - and only use the service at more convenient times. This won't necessary make more money as everybody wanting 1M at the most loaded time of day will force the vendor to install a lot more equipment which will be idle half of the time.

    3. Re:A suggestion by coug_ · · Score: 1
      You only actually need to choke the users down to what they've paid for when there is actual contention. If you let them have the full capabilities of the hardware the rest of the time, it costs you nothing and can only make them happier.

      I guess you're working under the assumption that only "normal" users have to pay for bandwidth. ISP's often have to pay based on how much bandwidth they use per month. If you're gonna let people have 1Mb connections for the price of 128Kb connections, you'd better make sure the cost of the 128Kb connections pays for the 1Mb of bandwidth that you're using.

  53. Re:Limiting bandwith by jlv · · Score: 1

    Dummynet is useful, but also available for FreeBSD is the AltQ package. This adds several additional QOS-style packet queuing disciplines, such as WFQ (weighted fair queuing) and CBQ (class-based queuing), that are bettm er to use to implement a BW/traffic shaping device.

    See http://www.csl.sony.co.jp/person/kjc/software.html

  54. FreeBSD solution by cjsnell · · Score: 1

    Here's a product that should do what you need:

    http://www.etinc.com/bwmgr.htm

    I would highly, highly reccommend that you use FreeBSD, especially if you are in a commercial/ISP environment. Linux is great and all but you can't beat FreeBSD's rock-solid tried-and-true TCP/IP stack. http://www.freebsd.org

    good luck!

    1. Re:FreeBSD solution by cjsnell · · Score: 1

      One thing I forgot to add...

      I would definitely do this at the router, if you can afford it. FreeBSD certainly rocks but doing this from a decent Cisco would be your best bet if you really want to do it right.

      If you can't afford a decent Cisco router, build a fast machine out of high-quality parts (or better yet, buy a Dell) and Intel NICs and install FreeBSD and the ET/BWMGR software.

      I think you'd be making a big mistake to use experimental Linux code on a very un-mature version of Linux (2.2.x) to try and do this.

    2. Re:FreeBSD solution by cjsnell · · Score: 1

      FreeBSD's networking code is based on the original BSD networking code which has been around forever.

      Linux's TCP/IP stack was redone in 2.2.x and has not had enough time to mature.

      Don't get me wrong--I'm not dissing linux. The idea behind Linux rocks but the fact is, FreeBSD is more "solid". FreeBSD's code is tightly controlled by a core group of programmers who are less/not likely to add experimental/partially-working features to the -STABLE releases. I can't tell you how many times I've found partially-working stuff in Linux kernels.

      My advice to you would be to try it for yourself. Download a -STABLE release, install it, and put it head-to-head with Linux. That's what we did a year ago, before we made the big move from Linux to FreeBSD.

    3. Re:FreeBSD solution by PapaZit · · Score: 1

      I personally have had problems with the 2.2 kernels that are probably related to the TCP/IP stack. I'm still trying to nail down exactly what's wrong.

      Statistics were posted to /. in the last day about FreeBSD vs. Linux web server performance.

      It's generally agreed that Linux/Apache lost to IIS in the revised Mindquest comparison (NOT the original, insanely loaded one) because of the Linux TCP/IP stack.

      Using linux without considering alternatives is bigotry.

      --
      Forward, retransmit, or republish anything I say here. Just don't misquote me.
    4. Re:FreeBSD solution by Wholeflaffer · · Score: 1

      Could you expand on this? In what way is FreeBSD more rock-solid and tried-and-true than Linux? What is it, specifically, that makes FreeBSD better for this application than Linux? I am currently a Linux user, and want to know if FreeBSD (or any of the other *BSDs) might be better suited to some applications. I also think there are many other users looking for concrete reasons to evaluate free OSes other than Linux.

      --
      Certified Microsoft Notworking Specialist
  55. Docs on 2.2x Qos by h2odragon · · Score: 2

    I've got a collection of all the documentation I've been able to find on the 2.2.x network stack, including the QoS stuff.

    It's all at my linux 2.2 site, check it out. Hope it helps.

  56. Yesh.. and no. by Signal+11 · · Score: 2

    Yes, you can limit downstream bandwidth. Routers have QoS, the linux kernel has several shapers to choose from, etc. But upstream might be more difficult. A malicious customer could simply type ping -s 1500 -f www.somewhere.com, and flood the entire wireless link he/she was on. There isn't an easy way to fix this. You can, however, confinscate their equipment and/or report them to the FCC for causing harmful inteference if they do decide to take down the link. I know that several cablemodems use snmp to inject QoS filters at the hardware level. Maybe there's similar offerings for other NICs. It could help during an emergency, and also to help limit upstream bandwidth.



    --

  57. Wireless vs Wired T1/Southern California by daviddennis · · Score: 1

    I want to get a T1 connection to my residence in the San Fernando Valley area of Southern California.

    How good would a wireless T1 be, and how much would it cost? I'm considering a wired T1, but it's a bit pricey for an individual.

    I'd also like to hear any feedback on cheaper wired T1 providers. I'm considering SoftAware - I know they're good, but $ 1,500 a month (all inclusive) is a little much.


    D
    ----

    1. Re:Wireless vs Wired T1/Southern California by tharris · · Score: 1

      We are going to offer Wireless 1M dedicated connections in our area for $350/mo, so it is considerably cheaper then a wired T1.
      Troy Harris
      Systems Administrator

  58. Re:Sorta related... - QOS on PPP connections by Richard+JC · · Score: 1

    I was under the impression that it was only
    possible to set QOS on outgoing connections. The
    problem here is on incoming large packets hogging
    the modem line. A 1500 packet can take a significant
    amount of time to receive.

    I wondered about dropping the MRU to force smaller packets and
    more fragmentation, but of course efficiency also drops.

    - Richard.

  59. Consider metered usage? by TBC · · Score: 1

    You might want to consider offering access to the 1 meg network in an open manner, but surcharge bandwidth usage (K transfered) above a point. I assume you could use IP accounting to manage this. You could also set it up so that when a new user brings up a new machine, a program watching the ARP tables could see the dynamic ARP entry, add a firewall rule to block all requests but port 80 and DNS. Then redirect port 80 to a local page where they can "log in." After they log in, create a static ARP entry for them and tie the accounting for their IP. If you do a search, MIT has done something like this on their network.

    Good Luck

    Dan

  60. Sounds inefficient by andrews · · Score: 1

    I'm assuming you'll have to have the traffic shaper on the LAN side of the wireless network. This means that your QOS and bandwidth restrictions will happen on the wrong side of your wireless network. Since you're not differentiating your speeds at the wireless side, all customers will be competing for the wireless bandwidth at the same speed. I'd be pretty upset if I was paying you full price for high bandwidth but couldn't get it.

  61. "IP Bandwidth Management" by mudhole · · Score: 1

    There's an introductory article in the June 1999 Linux Journal that may help...

  62. Packeteer by unx · · Score: 1

    Check out the Packeteer PacketShaper. (www.packeteer.com). I've used this product before, and it's well worth the cash you pay for it.

    I don't know what kind of budget you have, but considering that you are planning on implementing this in a business, I highly suggest you go with a hardware solution. As I don't work for Packeteer, I suggest you call their sales staff for more info.

  63. Bandwidth Manager by nocnoc · · Score: 1

    Hello there,
    there's a solution available for linux 2.2.x
    and freebsd 3.0.1 at:
    http://www.etinc.com
    The license costs $500 per MAC Addr.
    It works great.

    1. Re:Bandwidth Manager by qix · · Score: 1

      I'd like to add that, in my experience, BWMGR does not work as advertised, nor is et interested at all in providing technical support or issuing the various bug fixes needed to make it really work.

  64. Doesn't look appropriate. by Gumber · · Score: 1

    I don't know that the traffic shaper device is appropriate. It seems that it only works on a subinterface basis, which suggests the need for a single sub-interface per subscriber.

    This sounds like a waste of IP addresses to me. I would also worry about the ability of the kernel to support large numbers of subinterfaces in an efficient manner.

  65. Cisco CPU cycles aren't cheap! by Gumber · · Score: 1

    Given the cost of a cisco, it makes sense to consider doing the QOS stuff on another box.

    1. Re:Cisco CPU cycles aren't cheap! by Porky+Pig · · Score: 1

      Performing it straight on an interface shouldn't hurt too much - although I
      gotta admit, I've got no numbers to back me up here.

      - Yes, the overhead is something like 0.001% or
      less. Can live with it.

      Matching per IP address is rather CPU intensive though, according to the
      documentation.

      Actually, it's a bit more involved than that.
      According to documentation, using the standard
      access list (if you wish to match IP addr)
      shouldn't be that bad, but using the extended
      access list (if you wish to match say TCP port
      number) causes more overhead. What we've got
      is something like 10% overhead with a standard
      access list, and >20% with extended access list.

      By overhead I mean 'the packet rate which still
      can be processed by CPU'. (on input for instance,
      you'll see 'ignores' if CPU can't keep up with
      the incoming packet rate)

      Hope it helps.

      --
      Grunt. Oink, oink.
  66. A counterpoint. by Gumber · · Score: 3

    The previous poster suggests that you only throttle when bandwidth contention is an issue, suggesting that it will build goodwill.

    I would suggest the opposite. You will certainly have a surplus of bandwidth when you roll out your service. If you open things up wide to everyone then you will probably have some very happy customers for a few months, and they will doubtless tell their friends. Soon you will have a growing customer base of people who are coming to expect more than they pay for. Then you have to start throttling down bandwidth. People are now getting less than they were getting before. Even if they are getting what they paid for, a lot of people are going to feel like they are getting shortchanged and they will start complaining vocally.

    Maybe this isn't such a bad thing though. If you build a subscriber base quickly on word of mouth because you are giving away spare bandwith then you might be better off than if you build the subscriber base more slowly, or you have to advertise to build it quickly. It depends on how much the malcontents cost you once you have to start throttling connections, vs the costs of slower growth, or the costs of advertising. Unfortunately, the cost of the former is hard to predict.

    As for dealing with the daily peaks of bandwidth utilization, again, I think people will tend to react better to consistant performance throughout the day or week, rather than wide fluctuations. On the other hand, if it is possible to allow maximal thruput on short (10-40k) spurts and throttle it down on longer downloas, then it becomes more difficult for people to quantify and less likely to engender ill will.

    1. Re:A counterpoint. by dennisp · · Score: 2

      I completely agree. A real world example of this is shaw cable in toronto canada. I was a beta tester since early 1996 -- and access started at almost full 10mbps downlink and 768kbps uplink (no kidding). Anyway, the finally opened the network to everyone else, and over a course of the year they changed the pricing scheme to 39.95 canadian per month, and the monthly subscriber rate exploded. This of course ended in speeds that were 5-10x slower than access was previously. Believe me, the customers were not happy. However, the simple fact that they were not happy with 1-3mbps downlink and 250-400kbps uplink for 39.99 a month is the point. Stable speeds are the way to go. I'd be a lot happier with a set 2mbps downlink and 500kbps uplink with a higher tier QOS than having to worry about going on the internet during prime time where speeds are sometimes extremely slow (relatively of course).

      This guy, if I'm not mistaken, is targetting business users? If he is, he MUST go for stable speeds. If it's business users you are looking at, the WILL use the speed. The only situation I see where you can completely oversubscribe bandwidth is when you're dealing with an end consumer. They tend to use far less than their line is capable of on average. I myself average less than 5k/s per day and I would consider myself a pretty heavy user.

      However, if you think you can keep up with the subscriber rate, go ahead. All you have to do is segment the network at set peak intervals. You have to think like an amateur psychologist though. Giving more, then providing less in the future isn't a very good thing. People don't like less, they continually want more and more. So in conclusion, give them stable rates, and if they REALLY want more, then charge them more money to get a better QOS on a higher tier.

      An example of a wireless internet provider who has completely F***** this up, is www.mipps.net in toronto. They sell full 2mbps full duplex wireless connections but their connection to shaw fiberlink internet is a joke. They also give every customer a linux firewall router box instead of a cisco (running an old 2.0 kernel) which I think is a complete joke.

  67. FreeBSD *is* better for some things. by ivan_13013 · · Score: 1

    As a hard core Linux user..

    The nice thing about FreeBSD is that when the docs say it supports some hardware, it really supports it. FreeBSD contains very little or no beta or prerelease code, particularly in the kernel -- unlike most GNU/Linux distributions.

    The Linux and FreeBSD development models are significantly different, and neither is really better than the other. FreeBSD values rock solid stability and extensively tested code more than Linux's fast and radical growth and support for peripherals.

    Personally, I use Linux because I want my workstation on the "bleeding edge" of technology, so that I know what's going on.. and so that I can use my cheap TV card with my cheap video card. I also think that the dynamic nature of the Linux kernel will assist with advancing new technologies more than the "conservative" FreeBSD. However, it is still important to advance the "old" technologies...

    Both operating systems are very stable and fast, and as server OS's they both give the commercial systems a run for their money. Neither have significant stability problems. But FreeBSD is sometimes faster and it never claims to support hardware that is really only half-supported. I have not had a stability problem with either OS, but if reliability and performance were my top priority, I would at least consider FreeBSD.

  68. Bandwidth Limiting. by mindstrm · · Score: 1

    People have posted very good points about the pros/cons of bandwidth limiting.

    I feel that the best solution, (the one that would make ME happy) would be to allow the full bandwidth available to the client, unless things get busy. Then, you enforce a CIR, like in frame relay.
    And, you make it VERY CLEAR when you sell the service that this is how things work!

    Also, there are lots of posts about linux traffic shaping, and other free solutions. There are several commercial products that do this for you. One is called the iPATH. It's not horribly expensive, and allows you to do many interesting things with ethernet/IP.


    Also... regarding traffic.
    I am a firm believe that the proper way and the only long-term way to deal with bandwidth is to charge people based on what they use. Chare a relatively small monthly fee for the hookup, and charge a fair rate for the bandwidth used.

    I get REALLY mad when I read my cablemodem contract and it says 'you can NOT run a server of ANY kind, shaw@home is for casual, home use only.
    Who the heck made THEM the god of deciding what 'Internet USE' is? They provide me with a certain amount of bandwidth to my house. I can FTP things UP to people all day long.. but if I put up a server so they can request things themselves, I risk losing my connection. It is for 'attended use only'... what???
    They make it out like someone who does more than surf for porn and read email is 'abusing' their service.
    You know, if they chargedbased on bandwidth, they wouldn't have a problem. I would be MORE than willing to pay a fair rate for the bandwidth I use, as a tradeoff for them providing me with proper service.

  69. Re:Neato, but what does the FCC think???? by Jon+Pike · · Score: 2

    Well. its like any other area of life. "If other people are breaking the laws, then the laws must not mean much, so its OK if I do it too.." kind of thinking usually dosen't work well.

    There's often reasons behind the laws, that put
    them there in the first place. Oh, sorry about the "its the telcos, preventing competition" bit, these restrictions have been there (in one form or other) for much longer than those current issues.

    Another thing, if you are going to operate illegally and possibly interfere with other services (the real reason the rules are there), I'd pick a piece of band that DIDN'T have Hams around to notice and probably seek you out over it, rather than someplace not so traveled.

    Another another thing.. being an engineer and knowlegable in radio (and a Ham), there are problems with just upping your power. Narrower bandwith (like voice) = more sensitive recievers, and better range for same power = lower data rate in data mode. Higher bandwidth = faster data rates = less sensitive recievers = less range for same power/antenna situation. Its more of a challange for hi bandwith radio. Also, and worst, is the situation of multipath, and one station interfering with many others due to too much power. Digital signals need very clean signals, typically.. noise that you can hear and understand voice with can totally obliterate a digital connection. Having signal bounce back off mountains, tall buildings, airplanes, etc. can mess up a normally clear path, and that gets worse fast with more power.

    There's much to consider in something like this, too much for a short mail. Basically, low power and lots of antenna gain (which equals directivity, i.e. dishes or beams) is the better direction to go. There is a website that has a paper on these issues, written by a Ham researcher in digital high speed Ham networks, if you are really interested. I belive its called the "Higher speed Packet" page, Packet radio being the commonly used digital mode of networking.
    Search on Packet Radio, high speed, to find it..

    Anyway, I don't mean to say you shouldn't try something, since I really don't know the ISM laws,
    it may not be a problem to add antenna gain, and leave power the same, depends on how they wrote
    it up. That would work better, be cheaper, and the more directional you get the less interference you cause to whoever is your neighbors. Antennas are pretty easy and cheap to make, once you know a little bit about whats what. Get a copy of the Amateur Radio Handbook at the local library, or buy one, for starters...

    Didn't mean to write a book, but didn't want to see a place where common courtesy was also the better result way to go get by.. :-)

    Hope it helped...

  70. Limiting bandwith by lutzalbers · · Score: 2

    FreeBSD has a feature called dummynet. See the
    following URL: http://www.iet.unipi.it/~luigi/ip_dummynet/

  71. Re:Breezecom by dartboard · · Score: 1

    His point was that linux _as_ a router is much less efficient and more error prone than a dedicated router.

  72. Neato, but what does the FCC think???? by Cptn+Proton · · Score: 1

    I thought that there was a one (1) watt limit to the 900 MHz band, and you would need a license for anything else. Using a yagi to transmit would place 800 mW above that limit (ERP in one direction). However, just using a yagi to receive would not. Also, I don't see how you could use an amplifier legally on 900 MHz without a license.

    The FCC changes rules a lot, so I am not up on all of them. The question I have, besides the 160 KHz band (again 1 watt and not enough bandwith), part 15 devices (most require FCC type approval and FCC id numbers, and only let you have milliwatts-has that changed?),

    what other band besides 1 watt 900 MHz is there for high bandwith unrestricted use???

    yeah, I know about light too. Just RF.

  73. It's those little black vans...... by Cptn+Proton · · Score: 2

    There is these little black vans with just 'FCC' on the side. I really didn't believe that they existed until I saw one with its 10 or more antenna on top.

    Higher power is not a problem until you start interfering with somebody's TV set. They end up bitching to the FCC. Then the FCC sends the little black van to your area.

    I never thought that they ever caught anybody. Until I saw some press clippings about some guy whose equipment was confiscated and he paid a hefty fine.

    Well you say, I am not going to interfere with somebody's TV, the frequency is too high.

    Then you end up interfering with somebody's cell site, or somebody's direct TV, in the future it will be TV all over again with HDTV micro signals. But I can guarantee before you interfere with any of the above, there is one thing you _will_ interfere with -

    Aunt Myrtles old electric organ down the street. Every neighborhood including yours has one - an electric organ. They will pick up _any_ miss directed RF no matter the frequency. They are especially good with hi-power CB.

    I personally don't use CB. I did have one once, and when I did turn it on, a couple of times. It seemed that there was this guy who would flip his multi-KW on at 8 oclock and slam my needle. Then he would go about making these weird slow throat noises with reverb mixed in.

    It's those dumbshits that piss me off. I suppose I could have triangulated him quite easily with a couple of electric organs - or toasters for that matter. Then I could have stuck a needle in his coax and smoked his ass out - just never got around to it.

    Just this last fourth some worker was killed when the fireworks spontaneously ignited that was being set up. It has been theorized that stray RF was to blame. My experience with the CB idiot certainly has me thinking. Frequency too high or just a little more power?? Just don't interfere with a plane's navigation system and send it down.

  74. Re:Breezecom by The+Cisco+Kid · · Score: 1

    I think that might not be the right URL..

    From www.e-spec.com:

    "e-spec is a proprietary Application Framework developed specifically for building Windows* based
    Product Selection Software programs"

    It doesnt say a thing about wireless comm..

    I also tried www.e-spec.net (doesnt exist)
    and www.espec.com (something about environmental
    testing labs)

  75. Broadband Wireless by a.out · · Score: 1


    Wireless Network Solutions

    Check out the network management part. I know that what you are asking is very possible.

  76. Re:LWN Article by ZorinLynxie · · Score: 1

    This will hurt latency, affecting online games, telnet sessions, etc. Remember, you want to limit bandwidth, but not hurt their network experience.

    How about just giving them 1M burst, and charging them if they use more than their allotment over a one month period?

    --
    - =^o.o^=
  77. DIY Wireless, and trafic shaping via LRP by Greg@RageNet · · Score: 1

    Linux Router Project supports traffic shaping, although I've yet to set it up. If the breezecom routers dont do it you may be able to build a Linux router that'll traffic shape and do wireless to 2megabit too. see the Linux Wireless Router Howto

    This may also be a cheap solution to some of the other replyers who were interested in wireless routers if your into DIY!

    -- Greg

    --
    Slashdot, would a spell-checker for posting be too much to ask? It's not rocket science!
  78. Why aren't you using Breezecom's shaper by anticypher · · Score: 4

    This sounds like an exploratory question for someone who hasn't yet come up with a business plan. Are you truly expecting to provide a huge amount of bandwidth to thousands of customers and then try to use a free linux program to enforce your ToS? I'd love to see you succeed with this, because the latest Linux kernels have some traffic shaping in them, and you could help out the coders with a real world test bed.

    Why then aren't you taking advantage of Breezecom's built in Maximum Information Rate Class of Service? Do they charge too much for the management software? Have you even talked with their account reps? Their whole business is aimed at ISPs trying to do exactly this same thing. Breezecom modems emulate a serial connection, but their cheaper LAN products emulate an ethernet link. Their modems have a built in rate limiter, their LAN replacement is only aimed at office environments and not ISPs. It sounds like you have chosen the cheapest products, and are now trying to add something for nothing.

    To properly implement a per user CoS, you must assign a static IP address to each end station, and possibly lock it down to a MAC address. Then you can set up a traffic shaper for each customer with little hassle. Easiest way to do is have different customers in different subnets, so all the 128k people are on one subnet, 512k on another. Rule writing is easiest that way. If you try to do CoS on systems dynamically grabbing an IP address (DHCP or equiv), you will spend all your time writing custom code to match addresses to customers to ToS to shaper rules and so on. Avoid it.

    The best solution for packet shaping is Packeteer, who make a great box with a fairly good interface. The cost isn't that high compared with how much you will spend trying to implement the same thing with free software. Just buy one of their boxes and throw it in line with your ISP, then configure it a little and you can mostly forget it.

    The next solution is Cisco, who have a bunch of different options built into their IOS for crude packet shaping. Presumably at some point you will have to buy a big Cisco router, probably when you get more than 50-100 customers. Since you are an ISP, what routers are you using now?

    The cheap but limited solution is the latest linux kernel with IP Chains and Class Based Queueing. It should scale to handle a few subnets, each having its own CoS, but may not do 512k or higher. Crude, but should keep your bean counters happy until you have enough paying customers to afford something to cover a bigger user base.

    Also check out NetBSD shaping, since I haven't yet.

    No matter what you do, always enforce your bandwidth policy from the beginning, because you will lose all of your original customers later when you start to enfore the policy. Never give customers free bandwidth even if it is available, you are asking for a customer relations headache down the road if you do. Poor customer relations is the main reason small ISPs go out of business. This is the voice of experience learned the hard way :-(

    Remember, packet shaping is a one way process, if you want to limit the connection from the user back towards the internet, you have to install something at the customer end, either a small box or software on their machines. A nightmare you probably shouldn't touch.

    Good luck, and tell us what solution you end up with and how it works. We geeks are a curious bunch.

    the AC

    --
    Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
    1. Re:Why aren't you using Breezecom's shaper by heli0s · · Score: 1

      you mentioned having CoS on systems dynamically grabbing an IP address (DHCP or equiv)..and to avoid it...

      is there any way to do this in linux without a hassle? I'd like to be able to set outgoing traffic limits for any IP's that are setup to go through my gateway box.. i messed around with CBQ and got it to work, but it will only shape traffic for ips on a local eth device.. id like to just shape traffic for each ip on the subnet that uses the gateway, to mabye 10-15KB/s outgoing, unlimited incoming...

  79. Don't Need Shapers by hex_1 · · Score: 1

    I also work for an ISP using the same product. And the Station Adapters or Access points and wireless Bridges you are using have software built in that will limit the speed. We have sevral customers that on 128 k connections that work fine. If you read the manual it will tell you how.

    If you are sending all the signals to a seprate building and then bouncing them down to your server room I suggest doubling up on the antennas and using the uni24 (http://www.breezecom.com/Products/ant24dbi.htm) that way it won'tbe a bottleneck

  80. BreezeNet & Linux shaper by jaclu · · Score: 1

    I have a setup with a few Breexe nodes, and some leased line customers.

    My setup is a linux box connected to the net, static routing, so that each MAC is forced to a certain IP, and then shaper, some of the connected people have a few boxes, then I just shape them all through one device, so that they share their own alloted bandwith.

    Shaper (as far as I know) only shape outgoing (to the local people) trafic, had some trouble with morons uploading tons, so I use a spare box in between my "Breeze hub" box and my backbone, with lots of virtual IPs, each shaper device uses its own def route to one of the virtuals, so then I can shape both ways. Maybe not the most elegant, but it works ;)

  81. IP - Shaping - Nist Net by wwalker@pobox.com · · Score: 3

    Check out NistNet. It should do everything you are looking for.

    http://osi.ncsl.nist.gov/itg/nistnet/

    --
    Wayne Walker Unix/Linux Advocate, SysAdmin, MUD addict in remission
  82. Re:Linux 2.2.x QOS by Dark+Coder · · Score: 1

    Perfect for low-profiling your high-traffic web server from the packet-sniffing cable modem ISPs.

    Perfect when used with TCP wrapper and " DENY".

  83. Traffic Shaper works well with Cable Modem AUP by Dark+Coder · · Score: 1

    With RedHat Traffic Shapping and TCP Wrapper (for blocking ISP's port scan and compliance with AUP server ban), one can get a very fine industrial type web server that is at least accessible and suppresses your traffic profile to those below your neighbor kid's Quake Server or MP3 FTP site.

  84. Advanced packet shaper souced code for sale... by paulusk · · Score: 1

    This might not be the appropriate forum but.... my company worked on this project (a traffic shaper kernel module) for over a year and we didn't have the resources to test and sell the product. The features we have implemented are a lot more advanced than what is currently in the 2.2.X kernels like: 1. Bandwidth regulation based on: IP address or ranges of IPs TCP or UDP service 2. Bursting for any or all the bandwidth shaping rules 3. Real-time bandwidth statistics 4. dynamic configuration of bandwidth shaping rules

    1. Re:Advanced packet shaper souced code for sale... by paulusk · · Score: 1

      oops.. I posted too soon.. so if any company wants to pick up this project and give it a good home (and hopefully make it open-source) please email me. We are only asking what we have into it.. The address is paulusk@indirect.com..

  85. Bandwidth Metering by olleh · · Score: 1

    If your intent to saturate your local market with the Breezecom product (and I hope you do) you will see a significant reduction in performance because of the dwell time that the hoppers must sit when they collide. The more hoppers, the more times that they will collide, the more frequently your clients will have dwell periods. The end result is a significant performance hit. Sadly, the solution you are looking for is automatically built into the product that you will be using.

    A well developed and planned network might allow you to use the product with some limited success without too much colliding.

    I am interested in learning how you will tackle some other issues.

    Paul

    You may contact me directly at paul@rli.net or give me a call at 580-250-4247.

    www.rli.net