From owner-freebsd-ipfw@FreeBSD.ORG Thu Jul 22 06:43:39 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 527C716A4CE for ; Thu, 22 Jul 2004 06:43:39 +0000 (GMT) Received: from sloti.sofia.itdnet.net (sloti.sofia.itdnet.net [212.116.151.3]) by mx1.FreeBSD.org (Postfix) with SMTP id 4138D43D41 for ; Thu, 22 Jul 2004 06:43:36 +0000 (GMT) (envelope-from evgeny@sofia.itdnet.net) Received: (qmail 1282 invoked by uid 0); 22 Jul 2004 06:43:29 -0000 Received: from unknown (HELO ?192.168.0.192?) (212.116.151.30) by sloti.sofia.itdnet.net with SMTP; 22 Jul 2004 06:43:29 -0000 Message-ID: <40FF6220.9030506@sofia.itdnet.net> Date: Thu, 22 Jul 2004 09:43:44 +0300 From: Evgeny Ivanov User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7) Gecko/20040616 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: IPFW2 tables Again X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Jul 2004 06:43:39 -0000 Hi all, I have now the tables and ipfw2 but want to ask you for some details. I have the following config: In table 1 are added about 120 network addresses - from class B networks to single IP's. The idea is that I want to create 2 different bandwidth limitations for addresses in the table and for all other addresses. What I did was: ipfw add pipe 1 all from table(1) to 192.168.0.1 out via int-if - For IP's in table ipfw add pipe 10 all from any to 192.168.0.1 out via int-if - For all other IP's ipfw pipe 1 config bw 1Mbit/s ipfw pipe 10 config bw 128Kbit/s The question is: can I do it for about 200 users, and would that affect the machine performance. Because the table will be checked many many times. Can you please advice me ? Regards Evgeny Ivanov