Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 May 2001 00:42:01 +0200 (CEST)
From:      Luigi Rizzo <luigi@info.iet.unipi.it>
To:        Momma Bear Trish <trish@listmistress.org>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: dummynet issues
Message-ID:  <200105072242.AAA02870@info.iet.unipi.it>
In-Reply-To: <Pine.BSO.4.21.0105071511520.21937-100000@superconductor.rush.net> from Momma Bear Trish at "May 7, 2001 04:45:48 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> Its a bridge, right after the router in ingress
> 
> I;ve tried it different ways, but always 
> 
> 07000 102154250 105301608403 pipe 1 ip from 64.28.67.0/24 to any
> 07001  81785362   6862740312 pipe 2 ip from any to 64.28.67.0/24
> 
> either before or after other rules.
> 
> (so the rule number changes)
> 
> the pipes are configured at 80Mbit/s out and 25Mbit/s in (its also a
> 100Mbit full-duplex line, but we're limiting per cost)
> 
> ipfw pipe 1 config bw 80Mbit/s delay 2ms
> 
> ipfw pipe 2 config bw 25Mbit/s delay 2s
> 
> kernel config has these lines in it:
> 
> options         HZ=20

two bad things above:
1) you have a 2 seconds(!) delay in pipe 2 configuration (unless it is
   a typo).  You should not need any delay, anyways.
2) with high bandwidth, you surely need HZ=1000 or even higher to get
   a decent resolution. HZ=20 makes little sense for all practical
   purposes.

> firewall# uname -a
> FreeBSD firewall.andover.net 4.2-STABLE FreeBSD 4.2-STABLE #7: Mon Feb 12
> 08:20:09 EST 2001
> root@firewall.andover.net:/usr/src/sys/compile/FIREWALL  i386

this is ok as long as the source has been updated after Feb.10...

	cheers
	luigi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105072242.AAA02870>