Hi!
Lately I had been frequently losing my SSH connection to this Vyos in particular, which forwards requests through the public IP to some huge Lab datasets. Unfortunately that switch works at 100Mbps. I’ve created a simple “shaper” like this:
shaper outgoing_612 {
bandwidth 100mbit
class 10 {
bandwidth 28%
description “Upload datasets NAS e WWW”
match NAS-https-5001 {
ip {
source {
port 50001
}
}
}
class 20 {
bandwidth 0.5%
description “Not loosing SSH”
match SSH {
ip {
source {
port 22
}
}
}
}
default {
bandwidth 71.5%
}
It is working fine. But then I realized some people need to download huge datasets from the Internet, and when that happened, my network speed would turn really slow and sometimes I also lost my SSH connection to Vyos. So, with a lot of patiente while typing, I created another policy, this time using “limiter” to limit bandwitdh when internal users are downloading. Both these policies are applied to the Public interface. Limit “in”, Shaper “out”.
limiter Limit-Incoming {
class 50 {
bandwidth 10mbit
match Downloads {
ip {
source {
port 443
}
}
}
}
default {
bandwidth 80mbit
}
}
Now, with traffic in both directions my connection stays online.
I can also watch the traffic flow with “bmon” (simplified output bellow). The only thing I don’t understand, is why isn’t also a class with a respective % shown in “bmon” concerning this “limit” traffic policy?
Interfaces x RX bps pps %x TX bps pps %
lo x 0 0 x 0 0
qdisc none (noqueue) x 0 0 x 0 0
eth1 x 63.06KiB 946 x 2.78MiB 1.98K
qdisc 1: (htb) x 0 0 x 2.78MiB 1.98K
cls :1 (basic) x 0 0 x 0 0
**class 1:1 (htb)** x 0 0 x 2.78MiB 1.98K 23% **---total traffic**
**class 1:a (htb)** x 0 0 x 2.77MiB 1.95K 83% **---my shaper % usage**
qdisc 8056: (fq_codelx 0 0 x 2.77MiB 1.95K
class 8056:1de (fq_x 0 0 x 0 0
class 8056:240 (fq_x 0 0 x 0 0
class 8056:3da (fq_x 0 0 x 0 0
**class 1:15 (htb)** x 0 0 x 3.47KiB 27 0% **----all other traffic - default**
qdisc 8055: (fq_codelx 0 0 x 3.47KiB 27
class 8055:c7 (fq_cx 0 0 x 0 0
**class 1:14 (htb)** x 0 0 x 2.53KiB 9 4% **--my ssh % usage**
qdisc 8057: (fq_codelx 0 0 x 2.53KiB 9
qdisc ffff: (ingress) x 0 0 x 50.11KiB 946
cls none (u32) x 0 0 x 0 0
cls 8000: (u32) x 0 0 x 0 0
cls 8000:800 (u32) x 0 0 x 0 0
cls none (basic) x 0 0 x 0 0
cls :1 (basic) x 0 0 x 0 0
eth0 x 2.85MiB 2.03K x 68.28KiB 967
qdisc none (mq) x 0 0 x 62.77KiB 943
class :1 (mq) x 0 0 x 62.71KiB 942
qdisc none (pfifo_fast)x 0 0 x 62.77KiB 943
class :2 (mq) x 0 0 x 0 0
Thanks!