注:此處policy可以配置多條的,每個接口對應的member也可以多個,當配置特殊路由時,將相應的配置寫在balanced之前,如:按80端口只走wan1等,相應的配置可以查資料;
以上配置完成後,監聽eth0 ,eth1端口,查看包的情況;本人,eth0對應wan,10M的寬帶;eth1對應的wan1,20M的寬帶,下載速度,能達到30M,截圖如下;
而源地址不爲wan網關的包,只要匹配到(0x100/0xff00)就走mwan3_iface_wan;(這裏就是爲什麼對相同網關,無法做到帶寬疊加的原因),剩下的同理,匹配(0x200/0xff00 )走mwan3_iface_wan1.
root@Lepton:/# iptables -t mangle -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
mwan3_hook all -- anywhere anywhere
fwmark all -- anywhere anywhere
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
mssfix all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
mwan3_hook all -- anywhere anywhere
mwan3_output_hook all -- anywhere anywhere
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain fwmark (1 references)
target prot opt source destination
Chain mssfix (1 references)
target prot opt source destination
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN /* wan (mtu_fix) */ TCPMSS clamp to PMTU
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN /* wan (mtu_fix) */ TCPMSS clamp to PMTU
Chain mwan3_connected (1 references)
target prot opt source destination
MARK all -- anywhere 127.0.0.0/8 MARK or 0xff00
MARK all -- anywhere base-address.mcast.net/3 MARK or 0xff00
MARK all -- anywhere 172.16.8.0/24 MARK or 0xff00
MARK all -- anywhere 172.16.8.1 MARK or 0xff00
MARK all -- anywhere 172.16.9.0/24 MARK or 0xff00
MARK all -- anywhere 192.168.1.0/24 MARK or 0xff00
MARK all -- anywhere 192.168.1.2 MARK or 0xff00
MARK all -- anywhere 127.0.0.0 MARK or 0xff00
MARK all -- anywhere 127.0.0.0/8 MARK or 0xff00
MARK all -- anywhere localhost MARK or 0xff00
MARK all -- anywhere 127.255.255.255 MARK or 0xff00
MARK all -- anywhere 172.16.8.0 MARK or 0xff00
MARK all -- anywhere 172.16.8.121 MARK or 0xff00
MARK all -- anywhere 172.16.8.255 MARK or 0xff00
MARK all -- anywhere 172.16.9.0 MARK or 0xff00
MARK all -- anywhere Lepton.lan MARK or 0xff00
MARK all -- anywhere 172.16.9.255 MARK or 0xff00
MARK all -- anywhere 192.168.1.0 MARK or 0xff00
MARK all -- anywhere 192.168.1.103 MARK or 0xff00
MARK all -- anywhere 192.168.1.255 MARK or 0xff00
Chain mwan3_hook (2 references)
target prot opt source destination
CONNMARK all -- anywhere anywhere CONNMARK restore mask 0xff00
mwan3_ifaces all -- anywhere anywhere mark match 0x0/0xff00
mwan3_rules all -- anywhere anywhere mark match 0x0/0xff00
CONNMARK all -- anywhere anywhere CONNMARK save mask 0xff00
mwan3_connected all -- anywhere anywhere
Chain mwan3_iface_wan (1 references)
target prot opt source destination
MARK all -- 192.168.1.2 anywhere mark match 0x0/0xff00 /* wan */ MARK or 0xff00
MARK all -- 192.168.1.0/24 anywhere mark match 0x0/0xff00 /* wan */ MARK or 0xff00
MARK all -- anywhere anywhere mark match 0x0/0xff00 /* wan */ MARK xset 0x100/0xff00
Chain mwan3_iface_wan1 (1 references)
target prot opt source destination
MARK all -- 172.16.8.1 anywhere mark match 0x0/0xff00 /* wan1 */ MARK or 0xff00
MARK all -- 172.16.8.0/24 anywhere mark match 0x0/0xff00 /* wan1 */ MARK or 0xff00
MARK all -- anywhere anywhere mark match 0x0/0xff00 /* wan1 */ MARK xset 0x200/0xff00
Chain mwan3_ifaces (1 references)
target prot opt source destination
mwan3_iface_wan all -- anywhere anywhere mark match 0x0/0xff00
mwan3_iface_wan1 all -- anywhere anywhere mark match 0x0/0xff00
Chain mwan3_output_hook (1 references)
target prot opt source destination
mwan3_track_wan icmp -- anywhere anywhere icmp echo-request length 32
mwan3_track_wan1 icmp -- anywhere anywhere icmp echo-request length 32
Chain mwan3_policy_balanced (1 references)
target prot opt source destination
MARK all -- anywhere anywhere mark match 0x0/0xff00 statistic mode random probability 0.50000000000 /* wan1 1 2 */ MARK xset 0x200/0xff00
MARK all -- anywhere anywhere mark match 0x0/0xff00 /* wan 1 1 */ MARK xset 0x100/0xff00
Chain mwan3_rules (1 references)
target prot opt source destination
mwan3_policy_balanced all -- anywhere anywhere mark match 0x0/0xff00 /* default_rule */
Chain mwan3_track_wan (1 references)
target prot opt source destination
MARK all -- anywhere resolver2.opendns.com MARK or 0xff00
MARK all -- anywhere resolver1.opendns.com MARK or 0xff00
MARK all -- anywhere google-public-dns-a.google.com MARK or 0xff00
MARK all -- anywhere google-public-dns-b.google.com MARK or 0xff00
MARK all -- anywhere public1.114dns.com MARK or 0xff00
Chain mwan3_track_wan1 (1 references)
target prot opt source destination
MARK all -- anywhere resolver2.opendns.com MARK or 0xff00
MARK all -- anywhere google-public-dns-a.google.com MARK or 0xff00
MARK all -- anywhere public1.114dns.com MARK or 0xff00
root@Lepton:/#