一段DD防火墙限速 实测不错
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 20480kbit
$TCA parent 1:1 classid 1:10 htb rate 32kbit ceil 32kbit prio 2
$TQA parent 1:10 handle 10: $SFQ
$TFA parent 1:0 protocol ip prio 2 u32 match u16 0x0800 0xFFFF at -2 match u32 0x6B6B74E4 0xFFFFFFFF at -12 match u16 0x000B 0xFFFF at -14 flowid 1:10
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 20480kbit
$TCAU parent 1:1 classid 1:10 htb rate 32kbit ceil 32kbit prio 2
$TQAU parent 1:10 handle 10: $SFQ
iptables -t mangle -A PREROUTING -m mac --mac-source 00:0B:6B:01:01:01 -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -j IMQ --todev 0