Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 23 Oct 2003 08:51:23 -0400
From:      "Thomas S. Crum - 1WISP, Inc." <tscrum@1wisp.com>
To:        "Alhagie Puye" <alhagiep@yahoo.com>, <freebsd-ipfw@freebsd.org>
Subject:   Re: Equal bandwidth sharing by all hosts using dummynet
Message-ID:  <00b801c39964$5dacc950$5e01a8c0@1wispadmin>
References:  <20031022195900.91577.qmail@web20501.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
To be candid, I have not tinkered much with freebsd as a nat box.  If you
are using the same box to route and to shape, I'm sure the config will be
different.  My config (a bridge) is sitting between a cisco and my swicthes
and my cisco runs nat so all the private ip's are shaped both in and out
prior to the router nating it to a public ip.

GL, Tom


----- Original Message ----- 
From: "Alhagie Puye" <alhagiep@yahoo.com>
To: "Thomas S. Crum - 1WISP, Inc." <tscrum@1wisp.com>;
<freebsd-ipfw@freebsd.org>
Sent: Wednesday, October 22, 2003 3:59 PM
Subject: Re: Equal bandwidth sharing by all hosts using dummynet


> Thanks for the tip. The EVERYBODY "DOWN" works great
> but the others don't work.
>
> I'm wondering what the order of how the rules are
> applied affects it. It looks like the traffic shaping
> is happening AFTER the packets are nat-ed. Could that
> be the case? I said this because after nat, the
> packets coming back to my private network have the
> right IP's (192.168.42.0/24) but when the packets are
> are leaving my network, they have the wrong IP after
> nat. I'm going to try changing the rule a little bit.
> Will let you know what I find out.
>
> Thanks,
> Alhagie.
> --- "Thomas S. Crum - 1WISP, Inc." <tscrum@1wisp.com>
> wrote:
> > Do not use "all" of your available pipe as during
> > peak times it would
> > increase latency.
> >
> > # EVERYBODY "DOWN"
> > add queue 100 ip from any to 192.168.42.0/24
> > queue 100 config weight 1 pipe 100 mask dst-ip
> > 0xffffffff
> > pipe 100 config bw 1950Kbit/s
> > #
> > # EVERYBODY "UP"
> > add queue 101 ip from 192.168.42.0/24 to any
> > queue 101 config weight 1 pipe 101 mask src-ip
> > 0xffffffff
> > pipe 101 config bw 350Kbit/s
> >
> > # THIS ALLOWS DHCP TO WORK
> > add queue 250 ip from any to any
> > queue 250 config weight 1 pipe 250 mask src-ip
> > 0xffffffff
> > pipe 250 config bw 10Kbit/s
> >
> > It sounds as though you are using a seperate box for
> > shaping?  If so, this
> > configed box would go in between your router and
> > switch as a bridge.
> >
> > Best,
> >
> > Tom
> >
> > ----- Original Message ----- 
> > From: "Alhagie Puye" <alhagiep@yahoo.com>
> > To: <freebsd-ipfw@freebsd.org>
> > Sent: Wednesday, October 22, 2003 12:45 AM
> > Subject: Equal bandwidth sharing by all hosts using
> > dummynet
> >
> >
> > > Hi all,
> > >
> > > First of all, I have spent a lot of time reading
> > up on
> > > it.
> > >
> > > Anyway, I live in a shared accomodation with 2
> > > roommates and a landlord and we share a cable
> > internet
> > > connection. It is 2Mbit/400Kbit connection.
> > Sometimes
> > > when one of us is downloading a song through Kazaa
> > or
> > > a new Linux or FreeBSD iso, the bandwidth gets
> > hogged
> > > and other users can't get through.
> > >
> > > I was trying to configure dummynet using Fair
> > Queues
> > > but I seem to be missing something. I tried to
> > modify
> > > some of the examples on Luigi Rizzo's web site
> > > (http://info.iet.unipi.it/~luigi/ip_dummynet/) but
> > it
> > > doesn't seem to be working.
> > >
> > > It is a very simple setup.
> > >
> > > Private network (192.168.42.0/24)--------> FreeBSD
> > 5.1
> > > firewall doing NAT (DHCP on external interface)
> > >
> > > My configuration file excerpt:
> > >
> > > ipfw pipe 1 config bw 400Kbit/s
> > > ipfw pipe 2 config bw 1000Kbit/s
> > > ipfw add queue 1 ip from 192.168.42.0/24 to any
> > via
> > > fxp0
> > > ipfw queue 1 config weight 5 pipe 1 mask src-ip
> > > 0xffffffff
> > >
> > > ipfw add queue 2 ip from any to 192.168.42.0/24
> > via
> > > fxp0
> > > ipfw queue 2 config weight 5 pipe 2 mask dst-ip
> > > 0xfffffff
> > >
> > > When I do a "ipfw pipe show", the output is:
> > >
> > > firewall# ipfw pipe list
> > > 00001: 400.000 Kbit/s    0 ms   50 sl. 0 queues (1
> > > buckets) droptail
> > >     mask: 0x00 0x00000000/0x0000 ->
> > 0x00000000/0x0000
> > > 00002:   1.000 Mbit/s    0 ms   50 sl. 0 queues (1
> > > buckets) droptail
> > >     mask: 0x00 0x00000000/0x0000 ->
> > 0x00000000/0x0000
> > > q00001: weight 5 pipe 1   50 sl. 0 queues (64
> > buckets)
> > > droptail
> > >     mask: 0x00 0xffffffff/0x0000 ->
> > 0x00000000/0x0000
> > > q00002: weight 5 pipe 2   50 sl. 0 queues (64
> > buckets)
> > > droptail
> > >     mask: 0x00 0x00000000/0x0000 ->
> > 0xffffffff/0x0000
> > >
> > > The queues are always "0". So, it seems to me like
> > > they are not getting created. What am I missing? I
> > > have looked everywhere for answers. Any help would
> > be
> > > greatly appreciated.
> > >
> > > Cheers,
> > > Alhagie.
> > >
> > >
> > > __________________________________
> > > Do you Yahoo!?
> > > The New Yahoo! Shopping - with improved product
> > search
> > > http://shopping.yahoo.com
> > > _______________________________________________
> > > freebsd-ipfw@freebsd.org mailing list
> > >
> >
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> > > To unsubscribe, send any mail to
> > "freebsd-ipfw-unsubscribe@freebsd.org"
> > >
> >
>
>
> __________________________________
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> http://shopping.yahoo.com
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00b801c39964$5dacc950$5e01a8c0>