Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Jan 2013 08:59:46 +0200
From:      Sami Halabi <sodynet1@gmail.com>
To:        Luigi Rizzo <rizzo@iet.unipi.it>
Cc:        freebsd-ipfw <freebsd-ipfw@freebsd.org>
Subject:   Re: Limit Session Bandwidth
Message-ID:  <CAEW%2Bogaz0FbYatSA3FkNhTmyV9tt4xxzNRqb4Vnm80dvhiBUbg@mail.gmail.com>
In-Reply-To: <20130105233743.GA94797@onelab2.iet.unipi.it>
References:  <CAEW%2BogbGVYLiuPesyR5qTcjhMVFvbzU-yYX8CRbJ_Hs3C6RpMQ@mail.gmail.com> <20130103082937.GB54360@onelab2.iet.unipi.it> <CAAcX-AFC9zBdGax71OM_YGqtczyYB_G2GUMbVymEsRHB8rYzxQ@mail.gmail.com> <CAEW%2BogbMZ7vmO0Jp%2BBHO4NmfDbbGHZai09RwG9aE1bQ_jwHswg@mail.gmail.com> <20130105233743.GA94797@onelab2.iet.unipi.it>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
Thank you for the help.

sysctl net.inet.ip.fw.one_pass=0
introduces some issues to my configuration limits in my current
configuration, because limits aren't applied correctly since we continue
after the pipe, eg:
i had:
1900 pipe 1000 all from x.y.z.1 to any
2000 pipe 1001 all from any to x.y.z.1
2100 pipe 2000 all from x.y.z.0/24 to any
2100 pipe 2001 all from any to x.y.z.0/24
.
.
more pipes
.
..
6500 allow all from any to any

so the I had special limit(large) for x.y.z.1 IP but another limit in the
whole /24 that i didn't want it to affect.
any ideas how to solve it? i thought about skipto but I'm not sure how to
use.
Sami


On Sun, Jan 6, 2013 at 1:37 AM, Luigi Rizzo <rizzo@iet.unipi.it> wrote:

> On Sat, Jan 05, 2013 at 02:51:07PM +0200, Sami Halabi wrote:
> > Hi Luigi & Ozkan,
> >
> > Thanks for the response.
> >
> > Luigi i saw you said in some list never trust italians :), so i went step
> > by step.
> > first i put:
> > me out from a pipe
> >
> > sysctl net.inet.ip.fw.one_pass=0
> > ipfw pipe 123 config bw 1Mbit/s mask all
> > ipfw add 100 pipe 123 out
> >
> > ipfw add 120 allow ip from any to any
> >
> > Works like a charm.
> >
> > Next Step wil be:
> > ipfw pipe 456 config bw 10Mbit/s
> >
> >   ipfw sched 789 config mask all pipe 123
> >      or it should be:
> >   ipfw sched 789 config mask all pipe 456
>
> the latter.
>
> > ipfw add 110 queue 789 out
> >
> >
> > whats is the correct configuration ?
> >
> > the mask options isn't well documented, in the handbook its not even
> > mentiond.
>
> the manpage is slightly more up to date.
> The handbook is probably years behind.
>
> cheers
> luigi
>
> > same goes for scheduler...
> > I got the feeling that only few here know the options very welll... maybe
> > I'm wrong?
> >
> > Sami
> >
> >
> >
> > On Thu, Jan 3, 2013 at 12:46 PM, ?zkan KIRIK <ozkan.kirik@gmail.com>
> wrote:
> >
> > > I think there is a mistake at the sched config line. it should be as
> > >  ipfw sched 789 config mask all pipe 456
> > >
> > >
> > > On Thu, Jan 3, 2013 at 10:29 AM, Luigi Rizzo <rizzo@iet.unipi.it>
> wrote:
> > >
> > >> ipfw sched 789 config mask all pipe 123
> > >
> > >
> > >
> >
> >
> > --
> > Sami Halabi
> > Information Systems Engineer
> > NMS Projects Expert
> > FreeBSD SysAdmin Expert
>



-- 
Sami Halabi
Information Systems Engineer
NMS Projects Expert
FreeBSD SysAdmin Expert



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAEW%2Bogaz0FbYatSA3FkNhTmyV9tt4xxzNRqb4Vnm80dvhiBUbg>