Re: ipfw - TRAFFIC SHAPER

2009-10-09 Thread alexus
On Fri, Oct 9, 2009 at 1:22 PM, alexus  wrote:
> On Fri, Oct 9, 2009 at 12:57 PM, Brent Bloxam  wrote:
>> alexus wrote:
>>>
>>> I'm trying to fight with ipfw and unfortunately unsuccessfully...
>>>
>>> I created following rules
>>>
>>> ipfw pipe 1 config bw 1Mbit/s
>>> ifpw add 8080 pipe 1 tcp from any to any src-port www
>>> ifpw add 8080 pipe 1 tcp from any to any dst-port www
>>>
>>> yet I see peaks of my traffic is way higher them 1Mbit/s
>>> i have following modules loaded through kldload
>>>
>>>  2    3 0x80cd3000 15db8    ipfw.ko
>>>  5    1 0x80cec000 bbc8     dummynet.ko
>>>
>>> i even load
>>>
>>> 10    1 0x80e7d000 14df     ipdivert.ko
>>>
>>> and that still didn't help :(
>>> can anyone help me?
>>>
>>
>> Do you have an ipfw rule allowing www traffic before rule 8080?
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>
> no, nothing related to www, in fact the only rules I have before that
> one is followings:
>
> 00100 19704   3856110 allow ip from any to any via lo0
> 00200     0         0 deny ip from any to 127.0.0.0/8
> 00300     0         0 deny ip from 127.0.0.0/8 to any
>
> that's it...
>
> --
> http://alexus.org/
>

the other thing is kind of weird is when I do ipfw pipe show I get
same results no matter how many times I do that

su-3.2# ipfw pipe show
1:   2.000 Mbit/s0 ms   50 sl. 1 queues (1 buckets) droptail
mask: 0x00 0x/0x -> 0x/0x
BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
  0 tcp 72.21.81.133/80   64.237.55.83/51986 176846 168906331
44 56988 6909
su-3.2#


-- 
http://alexus.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ipfw - TRAFFIC SHAPER

2009-10-09 Thread alexus
On Fri, Oct 9, 2009 at 12:57 PM, Brent Bloxam  wrote:
> alexus wrote:
>>
>> I'm trying to fight with ipfw and unfortunately unsuccessfully...
>>
>> I created following rules
>>
>> ipfw pipe 1 config bw 1Mbit/s
>> ifpw add 8080 pipe 1 tcp from any to any src-port www
>> ifpw add 8080 pipe 1 tcp from any to any dst-port www
>>
>> yet I see peaks of my traffic is way higher them 1Mbit/s
>> i have following modules loaded through kldload
>>
>>  2    3 0x80cd3000 15db8    ipfw.ko
>>  5    1 0x80cec000 bbc8     dummynet.ko
>>
>> i even load
>>
>> 10    1 0x80e7d000 14df     ipdivert.ko
>>
>> and that still didn't help :(
>> can anyone help me?
>>
>
> Do you have an ipfw rule allowing www traffic before rule 8080?
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>

no, nothing related to www, in fact the only rules I have before that
one is followings:

00100 19704   3856110 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 deny ip from 127.0.0.0/8 to any

that's it...

-- 
http://alexus.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ipfw - TRAFFIC SHAPER

2009-10-09 Thread Brent Bloxam

alexus wrote:

I'm trying to fight with ipfw and unfortunately unsuccessfully...

I created following rules

ipfw pipe 1 config bw 1Mbit/s
ifpw add 8080 pipe 1 tcp from any to any src-port www
ifpw add 8080 pipe 1 tcp from any to any dst-port www

yet I see peaks of my traffic is way higher them 1Mbit/s
i have following modules loaded through kldload

 23 0x80cd3000 15db8ipfw.ko
 51 0x80cec000 bbc8 dummynet.ko

i even load

101 0x80e7d000 14df ipdivert.ko

and that still didn't help :(
can anyone help me?



Do you have an ipfw rule allowing www traffic before rule 8080?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


ipfw - TRAFFIC SHAPER

2009-10-09 Thread alexus
I'm trying to fight with ipfw and unfortunately unsuccessfully...

I created following rules

ipfw pipe 1 config bw 1Mbit/s
ifpw add 8080 pipe 1 tcp from any to any src-port www
ifpw add 8080 pipe 1 tcp from any to any dst-port www

yet I see peaks of my traffic is way higher them 1Mbit/s
i have following modules loaded through kldload

 23 0x80cd3000 15db8ipfw.ko
 51 0x80cec000 bbc8 dummynet.ko

i even load

101 0x80e7d000 14df ipdivert.ko

and that still didn't help :(
can anyone help me?

-- 
http://alexus.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"