Date: Sun, 3 Jun 2007 18:23:43 -0400 (EDT) From: "B. Cook" <bcook@poughkeepsieschools.org> To: freebsd-pf@freebsd.org Subject: cbq: adds red by default? Message-ID: <51250.24.161.13.8.1180909423.squirrel@mail.poughkeepsieschools.org>
next in thread | raw e-mail | index | archive | help
I am trying to create rules to filter traffic up and down for the place where I work. My syntax seems to be correct, as they pass pfctl -vvvvvnf , but after looking at the rules I wrote, and what pf will interpret them as; I am a little confused. on my children queue's most of them are set to borrow and to do ecn. As most of my machines are newer FreeBSD 6.2 machines, and a random sprinkling of Linux machines. I can not find specific documentation that says that FreeBSD 6.2 supports ecn, I am hoping that it does. what I see when I look at the commands parsed by pfctl is that where I wrote: cbq(ecn borrow) that it has replaced it with: cbq( red ecn borrow ) and I can not find things in the pf.conf man page telling me why it does that :) Below are my rules after being seen by pfctl: [~]# 44 > pfctl -vvvvvonf bsd-pf.conf | cat -n 1 altq on fxp0 cbq bandwidth 4Mb tbrsize 6000 queue { qUbsd qUschools qUothers } 2 queue qUbsd bandwidth 25% priority 6 cbq( red ecn borrow ) { qUack qUdns qUssh qUmail qUwww } 3 queue qUack bandwidth 1% priority 6 cbq( red ecn borrow ) 4 queue qUdns bandwidth 1% priority 5 cbq( red ecn borrow ) 5 queue qUssh bandwidth 2% priority 4 cbq( red ecn borrow ) { qUssh_int qUssh_bulk } 6 queue qUssh_int bandwidth 50% priority 7 cbq( borrow ) 7 queue qUssh_bulk bandwidth 50% priority 0 cbq( borrow ) 8 queue qUwww bandwidth 1% priority 3 cbq( red ecn borrow ) 9 queue qUmail bandwidth 1% priority 2 cbq( red ecn borrow ) 10 queue qUschools bandwidth 74% priority 5 cbq( red ecn ) { qUschool1 qUschool2 qUschool3 } 11 queue qUothers bandwidth 1% priority 4 cbq( default ) 12 queue qUschool1 bandwidth 25% priority 5 cbq( red ecn ) { qUevan qUfiero qUbram qUdon } 13 queue qUschool2 bandwidth 25% priority 5 cbq( red ecn ) { qUrhw qUsears qUeagle qUpnr qUlds qUshea } 14 queue qUschool3 bandwidth 25% priority 5 cbq( red ecn ) { qUvhwifi qUvhweb qUvhmail } 15 queue qUevan bandwidth 25% priority 6 cbq( red ecn borrow ) 16 queue qUfiero bandwidth 25% priority 6 cbq( red ecn borrow ) 17 queue qUbram bandwidth 25% priority 5 cbq( red ecn borrow ) 18 queue qUdon bandwidth 25% priority 3 cbq( red ecn borrow ) 19 queue qUrhw bandwidth 5% priority 6 cbq( red ecn borrow ) 20 queue qUsears bandwidth 5% priority 5 cbq( red ecn borrow ) 21 queue qUeagle bandwidth 5% priority 4 cbq( red ecn borrow ) 22 queue qUpnr bandwidth 5% priority 3 cbq( red ecn borrow ) 23 queue qUlds bandwidth 5% priority 3 cbq( red ecn borrow ) 24 queue qUshea bandwidth 5% priority 3 cbq( red ecn borrow ) 25 queue qUvhwifi bandwidth 5% priority 6 cbq( red ecn borrow ) 26 queue qUvhweb bandwidth 5% priority 5 cbq( red ecn borrow ) 27 queue qUvhmail bandwidth 5% priority 4 cbq( red ecn borrow ) 28 altq on plip0 cbq bandwidth 4Mb tbrsize 6000 queue { qDbsd qDschools qDothers } 29 queue qDbsd bandwidth 25% priority 6 cbq( red ecn borrow ) { qDack qDdns qDssh qDmail qDwww } 30 queue qDack bandwidth 1% priority 6 cbq( red ecn borrow ) 31 queue qDdns bandwidth 1% priority 5 cbq( red ecn borrow ) 32 queue qDssh bandwidth 2% priority 4 cbq( red ecn borrow ) { qDssh_int qDssh_bulk } 33 queue qDssh_int bandwidth 50% priority 7 cbq( borrow ) 34 queue qDssh_bulk bandwidth 50% priority 0 cbq( borrow ) 35 queue qDwww bandwidth 1% priority 3 cbq( red ecn borrow ) 36 queue qDmail bandwidth 1% priority 2 cbq( red ecn borrow ) 37 queue qDschools bandwidth 74% priority 5 cbq( red ecn ) { qDschool1 qDschool2 qDschool3 } 38 queue qDothers bandwidth 1% priority 4 cbq( default ) 39 queue qDschool1 bandwidth 25% priority 5 cbq( red ecn ) { qDevan qDfiero qDbram qDdon } 40 queue qDschool2 bandwidth 25% priority 5 cbq( red ecn ) { qDrhw qDsears qDeagle qDpnr qDlds qDshea } 41 queue qDschool3 bandwidth 25% priority 5 cbq( red ecn ) { qDvhwifi qDvhweb qDvhmail } 42 queue qDevan bandwidth 25% priority 6 cbq( red ecn borrow ) 43 queue qDfiero bandwidth 25% priority 6 cbq( red ecn borrow ) 44 queue qDbram bandwidth 25% priority 5 cbq( red ecn borrow ) 45 queue qDdon bandwidth 25% priority 3 cbq( red ecn borrow ) 46 queue qDrhw bandwidth 5% priority 6 cbq( red ecn borrow ) 47 queue qDsears bandwidth 5% priority 5 cbq( red ecn borrow ) 48 queue qDeagle bandwidth 5% priority 4 cbq( red ecn borrow ) 49 queue qDpnr bandwidth 5% priority 3 cbq( red ecn borrow ) 50 queue qDlds bandwidth 5% priority 3 cbq( red ecn borrow ) 51 queue qDshea bandwidth 5% priority 3 cbq( red ecn borrow ) 52 queue qDvhwifi bandwidth 5% priority 6 cbq( red ecn borrow ) 53 queue qDvhweb bandwidth 5% priority 5 cbq( red ecn borrow ) 54 queue qDvhmail bandwidth 5% priority 4 cbq( red ecn borrow ) If you are wondering about the plip0 interface.. These are not in place, they are not running. I am trying to create the rules here and then put them in place on the other box, so here the rules use plip0; as that is the only other interface I have on this box :)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51250.24.161.13.8.1180909423.squirrel>