SipShaper: QoS mit HFSC - bei mir klappt's super!

#!/bin/sh
#
# SipShaper v0.01beta
# VoIP Traffic Shaper for 1024/128Kbit/s ADSL Line
#
# Written by Udo Schacht-Wiegand (2005-04-01) 
#
# based on MYSHAPER from Dan Singletary (8/7/02)
# http://www.nslu2-linux.org/wiki/HowTo/EnableTrafficShaping
# and on phone-man's script
# http://www.ip-phone-forum.de/forum/viewtopic.php?p=100371#100371
# and on the Linux Magazine 02/05 article p.28
# 
# Please mail comments and improvements to sipshaper at udo dot comlink dot org


# Set your outgoing interface and upload rate (in kbit/s) here
DEV=ppp0
RATEUP=128

# end of configuration options

######################
# show status and exit
######################

if [ "$1" = "status" ]
then
        echo "[qdisc]"
        tc -s qdisc show dev $DEV

        echo "[class]"
        tc -s class show dev $DEV

        echo "[filter]"
        tc -s filter show dev $DEV

        echo "[iptables]"
        iptables -t mangle -L SIPSHAPER -v -x 2> /dev/null
        exit

fi

######################
# default: start it  #
######################

# Reset everything to a known state (cleared)
tc qdisc del dev $DEV root    2> /dev/null > /dev/null

# Flush and delete tables
iptables -t mangle --delete POSTROUTING -o $DEV -j SIPSHAPER 2> /dev/null > /dev/null
iptables -t mangle --flush        SIPSHAPER 2> /dev/null > /dev/null
iptables -t mangle --delete-chain SIPSHAPER 2> /dev/null > /dev/null

######################
# stop it and exit 
######################

if [ "$1" = "stop" ] 
then 
        echo "Shaping removed on $DEV."
        exit
fi

######################
# set up shaping
######################

# add HFSC root qdisc
tc qdisc add dev $DEV root handle 1: hfsc default 10

# add main rate limit class
tc class add dev $DEV parent 1: classid 1:1 hfsc sc rate ${RATEUP}kbit ul rate ${RATEUP}kbit

# keep it simple: two classes only
tc class add dev ppp0 parent 1:1 classid 1:10 hfsc sc umax 1500b dmax 53ms rate 40kbit ul rate ${RATEUP}kbit
tc class add dev ppp0 parent 1:1 classid 1:11 hfsc sc umax 1500b dmax 30ms rate 80kbit ul rate ${RATEUP}kbit

# add SIPSHAPER chain to the mangle table in iptables 
iptables -t mangle --new-chain SIPSHAPER
iptables -t mangle --insert POSTROUTING -o $DEV -j SIPSHAPER

# Filter for voip packets
tc filter add dev $DEV parent 1: prio 1 protocol ip handle 1 fw flowid 1:11 

iptables -t mangle -A SIPSHAPER -p udp --sport 5060 -j MARK --set-mark 1   # SIP High
iptables -t mangle -A SIPSHAPER -p udp --dport 5060 -j MARK --set-mark 1   # SIP High

iptables -t mangle -A SIPSHAPER -p udp --sport 4569 -j MARK --set-mark 1   # IAX High 
iptables -t mangle -A SIPSHAPER -p udp --dport 4569 -j MARK --set-mark 1   # "" 

iptables -t mangle -A SIPSHAPER -p udp --sport 10000:11000 -j MARK --set-mark 1   # RTP High 
iptables -t mangle -A SIPSHAPER -p udp --dport 10000:11000 -j MARK --set-mark 1   # "" 

# also put ssh in this chain (interactive)
iptables -t mangle -A SIPSHAPER -p tcp --dport ssh -j MARK --set-mark 1    # secure shell
iptables -t mangle -A SIPSHAPER -p tcp --sport ssh -j MARK --set-mark 1    # secure shell

echo SipShaper started on $DEV with ${RATEUP}kbit/s upload rate.
#end