# # Copyright (C) 2018 rosysong@rosinson.com # # This is the sample for nft-qos configuration file, # which will generate a nftables script in /tmp/qos.nft # # Getting Started # Official site : # https://netfilter.org/projects/nftables/index.html # What is nftables : # https://wiki.nftables.org/wiki-nftables/index.php/Main_Page # # Basic Operations # Configuring Tables : # https://wiki.nftables.org/wiki-nftables/index.php/Configuring_tables # Configuring Chains : # https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains # Configuring Rules : # https://wiki.nftables.org/wiki-nftables/index.php/Simple_rule_management # Quick Reference (recommended) : # https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes # https://netfilter.org/projects/nftables/manpage.html # config default default # Enable Flag for limit rate option limit_enable '1' # Options for enable Static QoS (rate limit) option limit_type 'static' # Options for Static QoS (rate limit) option static_unit_dl 'kbytes' option static_unit_ul 'kbytes' option static_rate_dl '50' option static_rate_ul '50' # Options for enable Dynamic QoS # This option can not compatible with Static QoS # option limit_type 'dynamic' # For Dynamic QoS Samples (unit of bandwidth is Mbps): option dynamic_cidr '192.168.1.0/24' option dynamic_cidr6 'AAAA:BBBB::1/64' option dynamic_bw_up '100' option dynamic_bw_down '100' # White list for static/dynamic limit # list limit_whitelist '192.168.1.225' # list limit_whitelist '192.168.1.0/24' # list limit_whitelist 'ABCD:CDEF::1/64' # Options for Traffic Priority option priority_enable '0' option priority_netdev 'lan' # # For Static QoS Rate Limit Samples : # # For Download : #config download # option hostname 'My PC' # option unit 'kbytes' # option ipaddr '192.168.1.224' # option rate '128' # # For Upload : #config upload # option hostname 'office-pc' # option unit 'mbytes' # option ipaddr 'ABCD:FFED::1/64' # option rate '1024' # # # Traffic Priority Samples : # # protocol : tcp, udp, udplite, sctp, dccp, tcp is default # priority : integer between 1-11, 1 is default # service : you can input a integer or service name, e.g. '22', '11-22', 'telnet', 'ssh, http, ftp', etc # #config priority # option protocol 'tcp' # option priority '-400' # option service '23' # option comment '?' # #config priority # option protocol 'udp' # option priority '-400' # option service 'https' # option comment '?' # #config priority # option protocol 'dccp' # option priority '0' # option service '22-35' # option comment '?' # #config priority # option protocol 'dccp' # option priority '300' # option service 'ftp,ssh,http' # option comment '?' #