Bash 脚本不工作带宽整形

Question

我希望这是一个简单的答案

问题：

我将以下名为 learn-address.sh 的 bash 脚本放在以下文件夹中：

vi /etc/openvpn/netem/learn-address.sh

在 .conf 文件中添加了以下 (2) 行：

script-security 3

learn-address /etc/openvpn/netem/learn-address.sh

并对学习地址脚本应用以下权限：

chmod 755 /etc/openvpn/netem/learn-address.sh

但是，脚本会更新文件（$ip.classid 和 $ip.dev）在 tmp 文件中并正确传递变量
但是bash脚本不执行tc class和filter命令（qdisc没有变化）
当用户连接到 OpenVPN 时调用学习地址脚本时，我将在脚本上使用什么权限来执行 tc class 和过滤命令，或者是否有其他东西我错过了？

非常感谢

脚本名称：learn-address.sh

#!/bin/bash

statedir=/tmp/

function bwlimit-enable() {
ip=
user=
dev=eth0

# Disable if already enabled.
bwlimit-disable $ip

# Find unique classid.
if [ -f $statedir/$ip.classid ]; then
    # Reuse this IP's classid
    classid=`cat $statedir/$ip.classid`
else
    if [ -f $statedir/last_classid ]; then
        classid=`cat $statedir/last_classid`
        classid=$((classid+1))
    else
        classid=1
    fi
    echo $classid > $statedir/last_classid
fi

# Find this user's bandwidth limit
# downrate: from VPN server to the client
# uprate: from client to the VPN server
if [ "$user" == "myuser" ]; then
    downrate=10mbit
    uprate=10mbit
elif [ "$user" == "anotheruser"]; then
    downrate=2mbit
    uprate=2mbit
else
    downrate=5mbit
    uprate=5mbit
fi

# Limit traffic from VPN server to client
tc class add dev $dev parent 1: classid 1:$classid htb rate $downrate
tc filter add dev $dev protocol all parent 1:0 prio 1 u32 match ip dst $ip/32 flowid 1:$classid

# Limit traffic from client to VPN server
tc filter add dev $dev parent ffff: protocol all prio 1 u32 match ip src $ip/32 police rate $uprate burst 80k drop flowid :$classid

# Store classid and dev for further use.
echo $classid > $statedir/$ip.classid
echo $dev > $statedir/$ip.dev
}

function bwlimit-disable() {
ip=

if [ ! -f $statedir/$ip.classid ]; then
    return
fi
if [ ! -f $statedir/$ip.dev ]; then
    return
fi

classid=`cat $statedir/$ip.classid`
dev=`cat $statedir/$ip.dev`

tc filter del dev $dev protocol all parent 1:0 prio 1 u32 match ip dst $ip/32
tc class del dev $dev classid 1:$classid

tc filter del dev $dev parent ffff: protocol all prio 1 u32 match ip src $ip/32

# Remove .dev but keep .classid so it can be reused.
rm $statedir/$ip.dev
}

# Make sure queueing discipline is enabled.
tc qdisc add dev $dev root handle 1: htb 2>/dev/null || /bin/true
tc qdisc add dev $dev handle ffff: ingress 2>/dev/null || /bin/true

case "" in
    add|update)
        bwlimit-enable  
        ;;
    delete)
        bwlimit-disable 
        ;;
    *)
        echo "[=13=]: unknown operation []" >&2
        exit 1
        ;;
esac

exit 0

Answer 1

此处对 tc 的调用发生在 dev 定义之前，稍后会在您解析函数参数并调用 bwlimit-enable 或 bwlimit-disable 之后发生.您似乎想移动这两个调用：

# Make sure queueing discipline is enabled.
tc qdisc add dev $dev root handle 1: htb 2>/dev/null || /bin/true
tc qdisc add dev $dev handle ffff: ingress 2>/dev/null || /bin/true

...到 case 语句下方。

Bash 脚本不工作带宽整形

Bash Script Not Working Bandwidth Shaping

bash

bandwidth

openvpn