使用 linux 下的 TC 流量控制测试

需要对网关做流量控制，针对IP和网段做控制，也有结合iptables实现方式，可能也有针对内外网的服务器，规则明白了，都很容易。

可以查看这篇参考文章http://www.zhirs.com/tc-for-use-under-linux-server-traffic-control.html，讲的很详细，下面是我改写的shell脚本，非iptables方式：

#!/bin/bash

# Set the following values to somewhat less than your actual download

# and uplink speed. In kilobits. Also
set the device that is to be shaped.

#INGOING traffic (gateway)

IN=eth0

#what ip do you want to limit

INET="192.168.138."

IPS="100"

IPE="254"

#Total DOWNLINK

DOWN="100mbit"

#ensure rate speed of DOWNLINK

DOWNLOADrate="100kbit"

#Allow max rate speed of DOWNLINK

DOWNLOADceil="250kbit"

start(){

#clean eth1 eth0 existing down- and uplink qdiscs, hide errors

/sbin/tc qdisc del dev $IN root
2>/dev/null

# install root htb of downlink and uplink

# main class

/sbin/tc qdisc add dev $IN root handle 1: htb

/sbin/tc class add dev $IN parent
1: classid 1:1 htb rate $DOWN ceil $DOWN

#simgle ip limit

/sbin/tc class add dev $IN parent
1:1 classid 1:2 htb rate $DOWNLOADrate ceil $DOWNLOADrate

/sbin/tc qdisc add dev $IN parent 1:2
sfq perturb 2

/sbin/tc filter add dev $IN protocol ip parent 1: prio
49 u32 match ip dst 192.168.138.10 flowid 1:2

/sbin/tc filter add dev $IN protocol ip parent 1: prio
49 u32 match ip dst 192.168.2.0/32
flowid 1:2

#net1 limit

for (( i=$IPS;
i<=$IPE; i=i+1 ))

do

#####Control DOWNLINK

/sbin/tc class add dev $IN parent
1:1 classid 1:1$i htb rate $DOWNLOADrate ceil $DOWNLOADceil

/sbin/tc qdisc add dev $IN parent 1:1$i
sfq perturb 1$i

/sbin/tc filter add dev $IN protocol ip parent 1: prio
50 u32 match ip dst $INET$i flowid 1:1$i

done

#net2 limit

#for (( i=$IPS;
i<=$IPE; i=i+1 ))

#do

# #####Control DOWNLINK

# /sbin/tc class add dev $IN parent
1:1 classid 1:2$i htb rate $DOWNLOADrate ceil $DOWNLOADceil

# /sbin/tc qdisc add dev $IN parent 1:2$i
sfq perturb 2$i

# /sbin/tc filter add dev $IN protocol ip parent 1: prio
50 u32 match ip dst $INET$i flowid 1:2$i

#done

#Other traffic

/sbin/tc filter add dev $IN protocol ip parent 1: prio
2 u32 match ip dst 0.0.0.0/32
flowid 1:1

}

stop(){

echo -n "(Delete all qdisc......)"

(/sbin/tc qdisc del dev
$IN root 2>/dev/null && echo "ok.Delete
sucessfully!") || echo "error."

}

#show status

status() {

echo "1.show qdisc $IN:----------------------------------------------"

/sbin/tc -s qdisc show dev $IN

echo "2.show class $IN:----------------------------------------------"

N1=`/sbin/tc class show
dev $IN | wc -l`

if [ $N1 == 0 ];then

echo "NULL, OFF Limiting "

else

/sbin/tc -s class show
dev $IN

echo "It work"

fi

}

#show help

usage() {

echo "(usage): `basename $0` [start | stop | restart | status ]"

echo "help:"

echo "start -- TC Flow Control start"

echo "stop -- TC Flow Control stop"

echo "restart -- TC Flow Control restart"

echo "status -- TC Show all TC Qdisc and class"

}

case "$1" in

start)

( start && echo "Flow
Control! TC started!" ) || echo "error."

exit 0

;;

stop)

( stop && echo "Flow
Control TC stopped!" ) || echo "error."

exit 0

;;

restart)

stop

start

echo "Flow Control restart"

;;

status)

status

;;

*) usage

exit 1

;;

esac

测试：

开启流量控制TC：

# ./tc_last.sh start

有限制的IP：192.168.138.131

# ifconfig eth0

eth0 Link encap:Ethernet HWaddr 00:0C:29:DA:56:1C

inet addr:192.168.138.131
Bcast:192.168.138.255
Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:1811422 errors:0 dropped:0 overruns:0
frame:0

TX packets:1083449 errors:0 dropped:0 overruns:0
carrier:0

collisions:0 txqueuelen:1000

RX bytes:943250761 (899.5 MiB) TX
bytes:87045802 (83.0 MiB)

# wget http://ftp13.enet.com.cn:88/pub/multimedia/video/uvs9_trial_e_rtm.rar
--2013-08-08
17:44:01-- http://ftp13.enet.com.cn:88/pub/multimedia/video/uvs9_trial_e_rtm.rar
Resolving ftp13.enet.com.cn... 122.224.6.16

Connecting to ftp13.enet.com.cn|122.224.6.16|:88... connected.

HTTP request sent, awaiting response... 200
OK

Length: 180175741 (172M) [application/octet-stream]

Saving to: `uvs9_trial_e_rtm.rar.17

无限制IP：192.168.138.99

# ifconfig eth0

eth0 Link encap:Ethernet HWaddr 00:0C:29:88:EC:85

inet addr:192.168.138.99
Bcast:192.168.138.255
Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:88578 errors:0 dropped:0 overruns:0
frame:0

TX packets:43771 errors:0 dropped:0 overruns:0
carrier:0

collisions:0 txqueuelen:1000

RX bytes:19401052 (18.5 MiB) TX
bytes:6876868 (6.5 MiB)

# wget http://ftp13.enet.com.cn:88/pub/multimedia/video/uvs9_trial_e_rtm.rar
--2013-07-16
22:57:10-- http://ftp13.enet.com.cn:88/pub/multimedia/video/uvs9_trial_e_rtm.rar
Resolving ftp13.enet.com.cn... 122.224.6.16

Connecting to ftp13.enet.com.cn|122.224.6.16|:88... connected.

HTTP request sent, awaiting response... 200
OK

Length: 180175741 (172M) [application/octet-stream]

Saving to: `uvs9_trial_e_rtm.rar.2

效果还是很显著的，就是和设置的流量范围有偏差，有待继续研究！