Date: Mon, 24 Mar 2008 11:58:00 -0300 From: AT Matik <asstec@matik.com.br> To: "Alexander Shulikov" <shulikov@gmail.com> Cc: freebsd-ipfw@freebsd.org, bu7cher@yandex.ru Subject: Re: kern/121955: [ipfw] [panic] freebsd 7.0 panic with mpd Message-ID: <200803241158.00240.asstec@matik.com.br> In-Reply-To: <18292fe60803240751w4b3afa31n5e8d469462da6175@mail.gmail.com> References: <18292fe60803240107v1462a87v4222790745844d5d@mail.gmail.com> <200803241121.34059.asstec@matik.com.br> <18292fe60803240751w4b3afa31n5e8d469462da6175@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Monday 24 March 2008 11:51:44 Alexander Shulikov wrote: > # sysctl -a | grep one_pass > net.inet.ip.fw.one_pass: 0 > > Yes - it eq 0. But I need it for next situation: all net I need shape > at one speed, but invididual ip addresses to another speed. > For example, > ipfw pipe 1 config bw 10Mbit/s queue 100 > ipfw pipe 2 config bw 10Mbit/s queue 100 > ipfw add pipe 1 ip from 192.168.1.0/24 to any > ipfw add pipe 2 ip from any to 192.168.1.0/24 > ipfw pipe 3 config bw 1Mbit/s queue 100 > ipfw pipe 4 config bw 1Mbit/s queue 100 > ipfw add pipe 3 ip from 192.168.1.1/32 to any > ipfw add pipe 4 ip from any to 192.168.1.1/32 that should work, I have similar setups running fine the /32 mask you should not need but I am missing the in/out definition in= =20 your rules > ...... > > > Also this configuration work in FreeBSD 6.2. (May be in 6.2 smaller call > tree?) > > 2008/3/24, AT Matik <asstec@matik.com.br>: > > On Monday 24 March 2008 08:08:02 Andrey V. Elsukov wrote: > > > AT Matik wrote: > > > > what do you mean? By setting to 0 the packages are not re-injected > > > > into the pipe but go through other existing rules after the matchi= ng > > > > pipe, or not? > > > > > > When you reset net.inet.ip.fw.one_pass to zero, packets return back > > > into ipfw to the next rule after dummynet/netgraph. And if you have > > > similar rules packets will be passed into dummynet/netgraph again. > > > > > > This is example how to get double fault (from mail archive): > > > > jaaa well but that is the famous bw 0 example which is not valid, as by > > itself certainly an invalid config, not connected to the existing probl= em > > the reporter has I guess > > > > Jo=C3=A3o > > > > > ifconfig em0 192.168.0.2/24 > > > kldload ipfw > > > kldload dummynet > > > sysctl net.inet.ip.fw.one_pass=3D0 > > > ipfw pipe 2 config bw 0 > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ipfw add 2 pipe 2 ip from any to any > > > ping 192.168.0.1 > > > > -- > > > > > > Atenciosamente, J.M. > > Respons=C3=A1vel Plant=C3=A3o Site Support Matik > > Infomatik Internet Technology > > (18)3551.8155 (18)8112.7007 > > http://info.matik.com.br > > > > > > > > > > > > > > > > A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada > > segura. Service fornecido pelo Datacenter Matik=20 > > https://datacenter.matik.com.br =2D-=20 Atenciosamente, J.M. Respons=C3=A1vel Plant=C3=A3o Site Support Matik Infomatik Internet Technology (18)3551.8155 =C2=A0(18)8112.7007 http://info.matik.com.br A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura. Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200803241158.00240.asstec>