iptables+tc 限制每个ip的带宽

#!/bin/bash

# OUTdoor interface
GREEN_DEV=eth1

# INdoor interface
RED_DEV=eth0

# Upload rate 250kb/s
UPRATE=2000

# Download rate 80kb/s
DOWNRATE=640

start(){
#clean existing down and uplink qdiscs,put the errors to /var/log/htb_log
 tc qdisc del dev $RED_DEV root  2>/dev/null >/dev/null
 tc qdisc del dev $GREEN_DEV root 2>/dev/null >/dev/null
 tc qdisc del dev $RED_DEV ingress 2>/dev/null >/dev/null
 tc qdisc del dev $GREEN_DEV ingress 2>/dev/null >/dev/null
 
 tc qdisc add dev $GREEN_DEV root handle 2: htb
 tc qdisc add dev $RED_DEV root handle 2: htb
 tc class add dev $GREEN_DEV parent 2: classid 2:1 htb rate 256kbit
 tc class add dev $RED_DEV parent 2: classid 2:1 htb rate 256kbit
 i=5;
 while [ $i -le 25 ]
 do
  tc class add dev $GREEN_DEV parent 2:1 classid 2:2$i htb rate ${DOWNRATE}kbit ceil ${DOWNRATE}kbit burst 15k
  tc class add dev $RED_DEV parent 2:1 classid 2:2$i htb rate ${UPRATE}kbit ceil ${UPRATE}kbit burst 15k
  tc qdisc add dev $GREEN_DEV parent 2:2$i handle 2$i: sfq
  tc qdisc add dev $RED_DEV parent 2:2$i handle 2$i: sfq
  tc filter add dev $GREEN_DEV parent 2:0 protocol ip prio 1 u32 match ip dst 192.168.1.$i flowid 2:2$i
  tc filter add dev $RED_DEV parent 2:0 protocol ip prio 1 u32 match ip dst 192.168.1.$i flowid 2:2$i
  i=`expr $i + 1`
 done
}

stop(){ 
#clean existing down and uplink qdiscs,put the errors to /var/log/htb_log
 tc qdisc del dev $RED_DEV root  2>/dev/null >/dev/null
 tc qdisc del dev $GREEN_DEV root 2>/dev/null >/dev/null
}
status() {
        echo "Show qdisc $RED_DEV (Display Upload queue):"
        tc -s qdisc show dev $RED_DEV
        echo "Show class $RED_DEV (Display Upload class):"
        tc class show dev $RED_DEV
        echo "*********************************UP/DOWN*********************************"
 echo "Show qdisc $GREEN_DEV (Display Download queue):"
        tc -s qdisc show dev $GREEN_DEV
        echo "Show class $GREEN_DEV (Display Download class):"
        tc class show dev $GREEN_DEV
}

usage(){
 echo "(usage): `basename $0` [start | stop | restart | status]"
 echo ""
 echo "Argument: functions:"
 echo "start  start traffic-control"
 echo "stop  stop traffic-control"
 echo "restart  restart traffic-control"
 echo "status  show detail of traffic"
}

# Argument
kernel=`uname -r|cut -b 1-3`
case "$kernel" in
 2.4|2.6)
  case "$1" in
   start)
    ( start && echo "TC started!" ) || echo "Error."
    exit 0
    ;;
   stop)
    ( stop && echo "TC stopped!" ) || echo "Error."
    exit 0
    ;;
   restart)
    ( start && echo "TC restarted!" ) || echo "Error."
    exit 0
    ;;
   status)
    status
    ;;
   *)
    usage
    exit 1
    ;;
  esac
   ;;
 *)
  echo " (!) Error: Unsupported Kernel!"
  exit 1
  ;;
esac