From owner-freebsd-ipfw@FreeBSD.ORG  Fri May  9 16:17:07 2008
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 712C9106564A
	for <freebsd-ipfw@freebsd.org>; Fri,  9 May 2008 16:17:07 +0000 (UTC)
	(envelope-from 482254ac@razorfever.net)
Received: from ironport2-out.teksavvy.com (ironport2-out.teksavvy.com
	[206.248.154.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 33BCC8FC14
	for <freebsd-ipfw@freebsd.org>; Fri,  9 May 2008 16:17:06 +0000 (UTC)
	(envelope-from 482254ac@razorfever.net)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhcFABcWJEhMCrCL/2dsb2JhbACBUxqpSg
X-IronPort-AV: E=Sophos;i="4.27,461,1204520400"; d="scan'208";a="20190245"
Received: from smtp.pppoe.ca (HELO smtp.teksavvy.com) ([65.39.196.238])
	by ironport2-out.teksavvy.com with ESMTP; 09 May 2008 12:17:06 -0400
Received: from server.razorfever.net ([76.10.176.139])
	by smtp.teksavvy.com (Internet Mail Server v1.0) with ESMTP id PVA03206;
	Fri, 09 May 2008 12:17:06 -0400
Received: from [192.168.0.10] (newskool.razorfever.net [192.168.0.10])
	by server.razorfever.net (8.13.8/8.13.8) with ESMTP id m49GH5To069783; 
	Fri, 9 May 2008 12:17:05 -0400 (EDT)
	(envelope-from 482254ac@razorfever.net)
Message-ID: <48247901.3000706@razorfever.net>
Date: Fri, 09 May 2008 12:17:05 -0400
From: "Derek (freebsd-ipfw)" <482254ac@razorfever.net>
User-Agent: Thunderbird 2.0.0.14 (Windows/20080421)
MIME-Version: 1.0
To: freebsd-ipfw@freebsd.org
References: <9a542da30805080844t395c8c81sd313fc2fd1780fcb@mail.gmail.com>
In-Reply-To: <9a542da30805080844t395c8c81sd313fc2fd1780fcb@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Cc: =?ISO-8859-1?Q?Ermal_Lu=E7i?= <ermal.luci@gmail.com>
Subject: Re: Dummynet, gif, and ipsec
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 May 2008 16:17:07 -0000

Ermal Luçi wrote:
> Well this is a patch to shape IPSec tunnels with ALTQ and FreeBSD 6.3
> as you are running. It is another alternative to dummynet though it
> have been tested with pf but should work with ipfw too since it knows
> about ALTQ.
> Hope it helps!
> 

Hi Ermal,

Thanks for the response!

I'm looking to roll this out on 5-7 machines, so I'm really looking for 
a solution where we wouldn't have to make changes to the kernel code and 
would be supported by the base system moving forward.

Are you planning to submit a PR with this patch?

Also are the m_tag, or altq_tag the same tags created with the ipfw tag 
command?

-- Derek