diff --git a/iopsys-brcm63xx-arm/panther/base-files/etc/firewall.qos b/iopsys-brcm63xx-arm/panther/base-files/etc/firewall.qos new file mode 100644 index 0000000000000000000000000000000000000000..615d5bce0a1a33cffb84f2628bfbea0d23c310cf --- /dev/null +++ b/iopsys-brcm63xx-arm/panther/base-files/etc/firewall.qos @@ -0,0 +1,37 @@ +#Queue Name=Priority +q_def_queue=0 +q_normal=1 +q_medium=2 +q_highest=3 + +# Local generated DNS traffic goes to q_highest +iptables -t mangle -D OUTPUT -p udp -m udp --dport 53 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p udp -m udp --dport 53 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated IGMP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p 2 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p 2 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated DHCP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p udp -m udp --dport 67:68 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p udp -m udp --dport 67:68 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated ICMP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p icmp -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p icmp -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# LAN generated ICMP traffic goes to q_normal +iptables -t mangle -D PREROUTING -p icmp -j MARK --set-xmark 0x$q_normal/0x$q_normal 2>/dev/null +iptables -t mangle -A PREROUTING -p icmp -j MARK --set-xmark 0x$q_normal/0x$q_normal + +# Prioritize all traffic from a specific port +#ebtables -t broute -D BROUTING -i eth3+ -j mark --mark-or 0x7 2>/dev/null +#ebtables -t broute -A BROUTING -i eth3+ -j mark --mark-or 0x7 + +# VLAN prio tag -> Queue prio +for i in `seq 1 7`; do + ebtables -t broute -D BROUTING --skbvlan-prio $i -j mark --mark-or 0x$i 2>/dev/null + ebtables -t broute -A BROUTING --skbvlan-prio $i -j mark --mark-or 0x$i +done + +# Rest goes to q_def_queue diff --git a/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/fiber b/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/fiber deleted file mode 100755 index 45a5068d0cf8078c241bab37836a97e64c1090ee..0000000000000000000000000000000000000000 --- a/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/fiber +++ /dev/null @@ -1,15 +0,0 @@ -#!/bin/sh /etc/rc.common - -START=60 - -USE_PROCD=1 - -start_service() { - wanconf -} - -service_triggers() -{ - procd_add_reload_trigger network wireless -} - diff --git a/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/wanconf b/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/wanconf index 00d8bef496e769ce67a77a15a715262eb82c9905..07120eae57243ee684726e68e6eb2b470b0f3473 100755 --- a/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/wanconf +++ b/iopsys-brcm63xx-arm/panther/base-files/etc/init.d/wanconf @@ -4,5 +4,6 @@ START=15 boot() { wanconf + sleep 5 } diff --git a/iopsys-brcm63xx-arm/tiger/base-files/etc/firewall.qos b/iopsys-brcm63xx-arm/tiger/base-files/etc/firewall.qos new file mode 100644 index 0000000000000000000000000000000000000000..615d5bce0a1a33cffb84f2628bfbea0d23c310cf --- /dev/null +++ b/iopsys-brcm63xx-arm/tiger/base-files/etc/firewall.qos @@ -0,0 +1,37 @@ +#Queue Name=Priority +q_def_queue=0 +q_normal=1 +q_medium=2 +q_highest=3 + +# Local generated DNS traffic goes to q_highest +iptables -t mangle -D OUTPUT -p udp -m udp --dport 53 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p udp -m udp --dport 53 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated IGMP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p 2 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p 2 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated DHCP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p udp -m udp --dport 67:68 -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p udp -m udp --dport 67:68 -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# Local generated ICMP traffic goes to q_highest +iptables -t mangle -D OUTPUT -p icmp -j MARK --set-xmark 0x$q_highest/0x$q_highest 2>/dev/null +iptables -t mangle -A OUTPUT -p icmp -j MARK --set-xmark 0x$q_highest/0x$q_highest + +# LAN generated ICMP traffic goes to q_normal +iptables -t mangle -D PREROUTING -p icmp -j MARK --set-xmark 0x$q_normal/0x$q_normal 2>/dev/null +iptables -t mangle -A PREROUTING -p icmp -j MARK --set-xmark 0x$q_normal/0x$q_normal + +# Prioritize all traffic from a specific port +#ebtables -t broute -D BROUTING -i eth3+ -j mark --mark-or 0x7 2>/dev/null +#ebtables -t broute -A BROUTING -i eth3+ -j mark --mark-or 0x7 + +# VLAN prio tag -> Queue prio +for i in `seq 1 7`; do + ebtables -t broute -D BROUTING --skbvlan-prio $i -j mark --mark-or 0x$i 2>/dev/null + ebtables -t broute -A BROUTING --skbvlan-prio $i -j mark --mark-or 0x$i +done + +# Rest goes to q_def_queue