Asuswrt-Merlin Layer 7 QoS

[JonoCoetz]

Just wondering if it's possible to do layer 7 QoS/shaping with Asuswrt-Merlin? Looking to shape (but not block) BitTorrent traffic without having to lock down to specific ports.

I'm fairly proficient with Linux and not scared of getting my hands dirty just looking for a nudge in the right direction.

 

[Soylent]

That would basically be packet inspection right? Would the Asus have the horsepower required for that?

 

[RMerlin]

Just wondering if it's possible to do layer 7 QoS/shaping with Asuswrt-Merlin? Looking to shape (but not block) BitTorrent traffic without having to lock down to specific ports.

I'm fairly proficient with Linux and not scared of getting my hands dirty just looking for a nudge in the right direction.

The l7 kernel module is included along with the protocol rules, but you will have to manually configure everything yourself, it's not accessible through the webui.

 

[JonoCoetz]

That would basically be packet inspection right? Would the Asus have the horsepower required for that?

Yes, Layer 7 shaping is another phrase for Deep Packet Inspection. That was a concern that the Asus wouldn't be powerful enough but both IPP2P and L7-filter come standard in Tomato so I don't think it will be too much of a problem.

 

[JonoCoetz]

Okay, I tried running example layer7 iptables commands earlier and I got errors about references to unknown modules/protocols or something. Will find the page I got them from earlier and post the exact error message.

 

[JonoCoetz]

Okay, found the problem, the layer7 kernel module wasn't loaded. http://www.smallnetbuilder.com/forums/showthread.php?t=9595

Thanks for the help!

 

[alwaysbless]

Has anyone actually been able to get layer 7 filtering to block bittorrent traffic?
Ive been using

insmod /lib/modules/2.6.22.19/kernel/net/netfilter/xt_layer7.ko
iptables -I FORWARD -s 192.168.1.0/24 -m layer7 --l7prot
o bittorrent -j DROP

and verified module is loading with lsmod but it does nothing in regards to blocking torrent traffic.