{"id":865,"date":"2009-10-20T11:23:55","date_gmt":"2009-10-20T09:23:55","guid":{"rendered":"http:\/\/michauko.org\/blog\/?p=865"},"modified":"2018-08-04T10:31:53","modified_gmt":"2018-08-04T09:31:53","slug":"limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux","status":"publish","type":"post","link":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/","title":{"rendered":"Limiter la bande passante entre 2 hosts (dont l’un en Linux)"},"content":{"rendered":"

Dans la s\u00e9rie aide-m\u00e9moire.<\/em>
\nImaginez : approbation d’une tonne de patchs de s\u00e9curit\u00e9 Windows en retard sur un WSUS avec des r\u00e9plicats. Imm\u00e9diatement, il commence \u00e0 downloader, via un proxy Squid sous Linux, donc via une machine Linux.
\nEt l\u00e0, votre bande passante est r\u00e9duite \u00e0 de la poussi\u00e8re car WSUS, via le proxy, pompe tout, \u00e0 fond.
\nRaaaaaaaaaa. M’\u00e9nerve.<\/p>\n

Vite, iptables doit pouvoir m’aider. Je suis une buse en QoS, mais bon, j’ai confiance en Google \ud83d\ude42<\/p>\n

Apr\u00e8s quelques recherches, je suis tomb\u00e9 sur LARTC, Linux Advanced Routing & Traffic Control. En quelques mots, une bande de fous-furieux qui aiment les lignes de commandes compliqu\u00e9es (\u00e0 c\u00f4t\u00e9 de \u00e7a, iptables est un joujou) pour faire de la QoS.
\nY’a un howto super complet : http:\/\/www.traduc.org\/docs\/howto\/vf\/lartc.html<\/a>. Pas le temps, \u00e7a sent le sujet compliqu\u00e9 et vaste. On verra plus tard.<\/p>\n

L\u00e0 je veux juste limiter le trafic entre mon proxy et ce p~!?[n de serveur WSUS.<\/p>\n

J’ai trouv\u00e9 3 lignes magiques ici (apr\u00e8s avoir survol\u00e9 le man tc<\/code> histoire de suivre le loin ce que je fais) :<\/p>\n

tc qdisc add dev eth0 root handle 1: cbq avpkt 1000 bandwidth 10mbit\r\ntc class add dev eth0 parent 1: classid 1:1 cbq rate 400kbit allot 1500 prio 5 bounded isolated\r\ntc filter add dev eth0 parent 1: protocol ip prio 16 u32 match ip dst 192.168.1.2 flowid 1:1<\/pre>\n
Je voulais limiter le trafic vers 192.168.1.2 via eth0 \u00e0 50 kB\/s, soit en gros 400 kbit\/s.
\nPour annuler, j’ai \u00ab\u00a0annul\u00e9\u00a0\u00bb les commandes, si je peux dire. Sans \u00eatre trop s\u00fbr de moi, j’ai simplement tent\u00e9 \u00e7a :<\/p>\n
tc filter del dev eth0 parent 1: protocol ip prio 16 u32 match ip dst 192.168.1.2 flowid 1:1\r\ntc class del dev eth0 parent 1: classid 1:1 cbq rate 400kbit allot 1500 prio 5 bounded isolated\r\ntc qdisc del dev eth0 root handle 1: cbq avpkt 1000 bandwidth 10mbit<\/pre>\n
Je n’ai pas vu d’effet de bord (genre, tout bloqu\u00e9 ou rien qui ne se r\u00e9tablit une fois le tc<\/em> annul\u00e9). Donc on va dire que c’est probablement un peu crade, que je n’y comprends pas tout, mais que \u00e7a marche.<\/p>\n
Voil\u00e0, si \u00e7a peut vous servir, j’en suis content.
\nnoob-powered<\/p>\n","protected":false},"excerpt":{"rendered":"
Dans la s\u00e9rie aide-m\u00e9moire. Imaginez : approbation d’une tonne de patchs de s\u00e9curit\u00e9 Windows en retard sur un WSUS avec des r\u00e9plicats. Imm\u00e9diatement, il commence \u00e0 downloader, via un proxy Squid sous Linux, donc via …<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[8,2,387,82,389],"tags":[406,409,407,408,405],"class_list":["post-865","post","type-post","status-publish","format-standard","hentry","category-coup-de-coeur","category-debian","category-ligne-de-commande","category-pl","category-reseau-secu","tag-bande-passante","tag-lartc","tag-limitation","tag-tc","tag-wsus"],"yoast_head":"\nLimiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Limiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko\" \/>\n<meta property=\"og:description\" content=\"Dans la s\u00e9rie aide-m\u00e9moire. Imaginez : approbation d’une tonne de patchs de s\u00e9curit\u00e9 Windows en retard sur un WSUS avec des r\u00e9plicats. Imm\u00e9diatement, il commence \u00e0 downloader, via un proxy Squid sous Linux, donc via …\" \/>\n<meta property=\"og:url\" content=\"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/\" \/>\n<meta property=\"og:site_name\" content=\"Le blog de Michauko\" \/>\n<meta property=\"article:published_time\" content=\"2009-10-20T09:23:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-08-04T09:31:53+00:00\" \/>\n<meta name=\"author\" content=\"michauko\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"michauko\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/\"},\"author\":{\"name\":\"michauko\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"headline\":\"Limiter la bande passante entre 2 hosts (dont l’un en Linux)\",\"datePublished\":\"2009-10-20T09:23:55+00:00\",\"dateModified\":\"2018-08-04T09:31:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/\"},\"wordCount\":298,\"commentCount\":4,\"keywords\":[\"bande passante\",\"LARTC\",\"limitation\",\"tc\",\"WSUS\"],\"articleSection\":[\"coup de coeur\",\"Debian\",\"ligne de commande\",\"planet-libre.org\",\"reseau et s\u00e9cu\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/\",\"name\":\"Limiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\"},\"datePublished\":\"2009-10-20T09:23:55+00:00\",\"dateModified\":\"2018-08-04T09:31:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Limiter la bande passante entre 2 hosts (dont l’un en Linux)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/\",\"name\":\"Le blog de Michauko\",\"description\":\"Si tu ne comprends pas le titre de l'article, passe ton chemin\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/michauko.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/michauko.org\\\/blog\\\/#\\\/schema\\\/person\\\/0cd9f3d9ce4dccc05df81a5b27051ea9\",\"name\":\"michauko\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g\",\"caption\":\"michauko\"},\"sameAs\":[\"http:\\\/\\\/michauko.org\\\/\"],\"url\":\"https:\\\/\\\/michauko.org\\\/blog\\\/author\\\/randomized2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Limiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/","og_locale":"fr_FR","og_type":"article","og_title":"Limiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko","og_description":"Dans la s\u00e9rie aide-m\u00e9moire. Imaginez : approbation d’une tonne de patchs de s\u00e9curit\u00e9 Windows en retard sur un WSUS avec des r\u00e9plicats. Imm\u00e9diatement, il commence \u00e0 downloader, via un proxy Squid sous Linux, donc via …","og_url":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/","og_site_name":"Le blog de Michauko","article_published_time":"2009-10-20T09:23:55+00:00","article_modified_time":"2018-08-04T09:31:53+00:00","author":"michauko","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"michauko","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/#article","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/"},"author":{"name":"michauko","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"headline":"Limiter la bande passante entre 2 hosts (dont l’un en Linux)","datePublished":"2009-10-20T09:23:55+00:00","dateModified":"2018-08-04T09:31:53+00:00","mainEntityOfPage":{"@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/"},"wordCount":298,"commentCount":4,"keywords":["bande passante","LARTC","limitation","tc","WSUS"],"articleSection":["coup de coeur","Debian","ligne de commande","planet-libre.org","reseau et s\u00e9cu"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/","url":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/","name":"Limiter la bande passante entre 2 hosts (dont l'un en Linux) - Le blog de Michauko","isPartOf":{"@id":"https:\/\/michauko.org\/blog\/#website"},"datePublished":"2009-10-20T09:23:55+00:00","dateModified":"2018-08-04T09:31:53+00:00","author":{"@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9"},"breadcrumb":{"@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/michauko.org\/blog\/limiter-la-bande-passante-entre-2-hosts-dont-lun-en-linux-865\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/michauko.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Limiter la bande passante entre 2 hosts (dont l’un en Linux)"}]},{"@type":"WebSite","@id":"https:\/\/michauko.org\/blog\/#website","url":"https:\/\/michauko.org\/blog\/","name":"Le blog de Michauko","description":"Si tu ne comprends pas le titre de l'article, passe ton chemin","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/michauko.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/michauko.org\/blog\/#\/schema\/person\/0cd9f3d9ce4dccc05df81a5b27051ea9","name":"michauko","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5c3a8969c185fd0eef3893a15408f3ef1b36a6681a066b1eb32045643c30ba65?s=96&d=mm&r=g","caption":"michauko"},"sameAs":["http:\/\/michauko.org\/"],"url":"https:\/\/michauko.org\/blog\/author\/randomized2\/"}]}},"_links":{"self":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/865","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/comments?post=865"}],"version-history":[{"count":4,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/865\/revisions"}],"predecessor-version":[{"id":1766,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/posts\/865\/revisions\/1766"}],"wp:attachment":[{"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/media?parent=865"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/categories?post=865"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michauko.org\/blog\/wp-json\/wp\/v2\/tags?post=865"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}