Linux Advanced Routing & Traffic Control

Linux Advanced Routing & Traffic Control

Netherlabs BV

bert.hubert@netherlabs.nl

Thomas Graf (Section Author)

tgraf%suug.ch

Gregory Maxwell (Section Author)

Remco van Mook (Section Author)

remco@virtu.nl

Martijn van Oosterhout (Section Author)

kleptog@cupid.suninternet.com

Paul B Schroeder (Section Author)

paulsch@us.ibm.com

Jasper Spaans (Section Author)

jasper@spaans.ds9a.nl

Pedro Larroy (Section Author)

piotr%member.fsf.org

A very hands-on approach to iproute2, traffic shaping and a bit of

netfilter.

_______________________________________________________________________

Table of Contents

1. Dedication

2. Introduction

2.1. Disclaimer & License

2.2. Prior knowledge

2.3. What Linux can do for you

2.4. Housekeeping notes

2.5. Access, CVS & submitting updates

2.6. Mailing list

2.7. Layout of this document

3. Introduction to iproute2

3.1. Why iproute2?

3.2. iproute2 tour

3.3. Prerequisites

3.4. Exploring your current configuration

3.4.1. ip shows us our links

3.4.2. ip shows us our IP addresses

3.4.3. ip shows us our routes

3.5. ARP

4. Rules - routing policy database

4.1. Simple source policy routing

4.2. Routing for multiple uplinks/providers

4.2.1. Split access

4.2.2. Load balancing

5. GRE and other tunnels

5.1. A few general remarks about tunnels:

5.2. IP in IP tunneling

5.3. GRE tunneling

5.3.1. IPv4 Tunneling

5.3.2. IPv6 Tunneling

5.4. Userland tunnels

6. IPv6 tunneling with Cisco and/or 6bone

6.1. IPv6 Tunneling

7. IPSEC: secure IP over the Internet

7.1. Intro with Manual Keying

7.2. Automatic keying

7.2.1. Theory

7.2.2. Example

7.2.3. Automatic keying using X.509 certificates

7.3. IPSEC tunnels

7.4. Other IPSEC software

7.5. IPSEC interoperation with other systems

7.5.1. Windows

7.5.2. Check Point VPN-1 NG

8. Multicast routing

9. Queueing Disciplines for Bandwidth Management

9.1. Queues and Queueing Disciplines explained

9.2. Simple, classless Queueing Disciplines

9.2.1. pfifo_fast

9.2.2. Token Bucket Filter

9.2.3. Stochastic Fairness Queueing

9.3. Advice for when to use which queue

9.4. Terminology

9.5. Classful Queueing Disciplines

9.5.1. Flow within classful qdiscs & classes

9.5.2. The qdisc family: roots, handles, siblings and

parents

9.5.3. The PRIO qdisc

9.5.4. The famous CBQ qdisc

9.5.5. Hierarchical Token Bucket

9.6. Classifying packets with filters

9.6.1. Some simple filtering examples

9.6.2. All the filtering commands you will normally need

9.7. The Intermediate queueing device (IMQ)

9.7.1. Sample configuration

10. Load sharing over multiple interfaces

10.1. Caveats

10.2. Other possibilities

11. Netfilter & iproute - marking packets