#! /bin/bash
# @(#)(CAcert) $Id: tclimit,v 1.3 2015/10/12 08:15:37 root Exp $
# tclimit - install rate limiter for http downloads from crl.cacert.org

DEV=eth1

tc qdisc add dev ${DEV} root handle 1: cbq avpkt 1000 bandwidth 100mbit

tc class add dev ${DEV} parent 1: classid 1:1 cbq rate 14mbit \
	allot 1500 prio 5 bounded isolated

tc filter add dev ${DEV} parent 1: protocol ip prio 16 u32 \
	match ip sport 80 0xffff flowid 1:1
tc filter add dev ${DEV} parent 1: protocol ip prio 16 u32 \
	match ip sport 443 0xffff flowid 1:1

tc qdisc add dev ${DEV} parent 1:1 sfq perturb 10

# to cleanup:
# tc qdisc del dev ${DEV} root