ndpi-netfilter - правила

#!/bin/bash

export tc="/sbin/tc"

iface="enp2s0"

speed_full="10mbit"
speed_big="9mbit"
speed_low="5mbit"
speed_fix="1mbit"

${tc} qdisc del dev ${iface} root

${tc} qdisc add dev ${iface} root handle 1: htb default 14

${tc} class add dev ${iface} parent 1: classid 1:1 htb rate ${speed_full} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:12 htb rate ${speed_big} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:13 htb rate ${speed_low} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:14 htb rate ${speed_fix} ceil ${speed_fix} burst 12500

tc qdisc add dev ${iface} parent 1:12 handle 20: pfifo limit 500
tc qdisc add dev ${iface} parent 1:13 handle 30: sfq perturb 10
tc qdisc add dev ${iface} parent 1:14 handle 40: sfq perturb 10

lsmod | grep ifb 2>&1>/dev/null;
if [ $? = 1 ]; then
        modprobe ifb numifbs=1
        ip link set dev ifb0 up
        echo "Load IFB module"
else
        echo "IFB module already loaded"
fi;

${tc} qdisc del dev ${iface} ingress
${tc} qdisc add dev ${iface} handle ffff: ingress
${tc} filter add dev ${iface} parent ffff: protocol ip prio 10 u32 match u32 0 0 action xt -j MARK --set-mark 0x02 action mirred egress redirect dev ifb0

iface="ifb0"

${tc} qdisc del dev ${iface} root
${tc} qdisc add dev ${iface} root handle 1: htb default 14
${tc} class add dev ${iface} parent 1: classid 1:1 htb rate ${speed_full} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:12 htb rate ${speed_big} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:13 htb rate ${speed_low} ceil ${speed_full} burst 12500
${tc} class add dev ${iface} parent 1:1 classid 1:14 htb rate ${speed_fix} ceil ${speed_fix} burst 12500

tc qdisc add dev ${iface} parent 1:12 handle 20: pfifo limit 500
tc qdisc add dev ${iface} parent 1:13 handle 30: sfq perturb 10
tc qdisc add dev ${iface} parent 1:14 handle 40: sfq perturb 10