Re: [LARTC] Per-destination MTUs?
bert hubert wrote: >http://lartc.org/HOWTO//cvs/2.4routing/html/lartc.cookbook.mtu-discovery.html > > (Ignoring the fact that I should've looked there in the first place ...) thanks, it works exactly as desired (even on kernel 2.2.19, fwiw). -- Michael T. Babcock CTO, FibreSpeed Ltd. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Per-destination MTUs?
On Thu, Jul 04, 2002 at 03:36:28PM -0400, Michael T. Babcock wrote: > I have some Path-MTU discovery problems it seems; a few sites I deal > with can only communicate with us if we use an MTU of 1492 (they're on > ADSL of course ...) and another (in Japan) only works for file transfers > if we use an MTU of around 1425. http://lartc.org/HOWTO//cvs/2.4routing/html/lartc.cookbook.mtu-discovery.html -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Per-destination MTUs?
I have some Path-MTU discovery problems it seems; a few sites I deal with can only communicate with us if we use an MTU of 1492 (they're on ADSL of course ...) and another (in Japan) only works for file transfers if we use an MTU of around 1425. Is there any way to tell Linux what the MTU should be on a per-destination basis? -- Michael T. Babcock CTO. FibreSpeed Ltd. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] how to control bridge traffic using imq
Hello, On Thu, 4 Jul 2002, bert hubert wrote: > iptables does not function on bridge devices - there are reasons for this, > I'm seeing if I can push the right people into submitting a patch though. Some days ago I uploaded some patches related to bridging. Of course, they are one big ugly hack but allow the bridging to be used in special "IP" mode (wrong word, of course) where the incoming traffic can be received on the slave ports, the output traffic can be sent via the master or the slave interfaces (according to the admin's needs) and ARP is received on both the master and the slave interface to help the neighbouring code to play with such asymmetric routing. The result: full inspection of the traffic forwarded between the slave ports, broadcast forwarding, etc. http://www.linuxvirtualserver.org/~julian/#bridging > Regards, > > bert Regards -- Julian Anastasov <[EMAIL PROTECTED]> ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] tc reliably hangs my system
On Thu, Jul 04, 2002 at 04:42:19PM +0200, bert hubert wrote: > I've forwarded this to the right kernel people - your description is > specific enough, so I have good hope that this bug will be spotted soon! Ok, I've been told that this might or might not help: http://www.cyberus.ca/~hadi/patches/ing-stats.patch This fixes a known issue that looks like this - can you try if this resolves your problem? This patch will be in in 2.4.19 probably. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] advanced routing for traffic generator-like setup
You can enable Zebra routing because both host are in different networks maybe ripd a possible solution this issue http://www.guadawireless.net -.-.LievenX..--. - Mensaje Original - De: bert hubert <[EMAIL PROTECTED]> Fecha: Jueves, Julio 4, 2002 4:49 pm Asunto: Re: [LARTC] advanced routing for traffic generator-like setup > On Mon, Jul 01, 2002 at 02:14:22AM +0200, Filip Sneppe wrote: > > > How does one set up advanced routing so that when > > HostA sends a packet from 1.1.1.1 to 2.2.2.1, it > > goes via HostB, and vice versa: a packet from > > 2.2.2.1 to 1.1.1.1 also goes via HostB. > > Only by doing NAT at HostB. Linux is way to smart for this to work > otherwise:-) > > Regards, > > bert > > -- > http://www.PowerDNS.com Versatile DNS Software & Services > http://www.tk the dot in .tk > http://lartc.org Linux Advanced Routing & Traffic > Control HOWTO > ___ > LARTC mailing list / [EMAIL PROTECTED] > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ > begin:vcard n:;LievenX version:2.1 end:vcard
Re: [LARTC] quake3 issues
> # install root HTB, point default traffic to 1:20:
> tc qdisc add dev $DEV root handle 1: htb default 20
> tc class add dev $DEV parent 1: classid 1:1 htb rate ${UPLINK}kbit \
>burst 6k
> tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
>burst 6k prio 1
> tc class add dev $DEV parent 1:1 classid 1:20 htb \
>rate $[9*$UPLINK/10]kbit burst 6k prio 2
> So far, so good.
>
> The only problem I have is that, if I dont play quake, all the normal
> traffic gets only 90% of my line speed ($[9*$UPLINK/10] kbit). But I want
> that traffic to get 100%, but only if I dont play).
>
> Ok, then i modified the 1:20 class to have a ceil statement:
>
> ---
> tc class add dev $DEV parent 1:1 classid 1:20 htb \
>rate $[9*$UPLINK/10]kbit ceil ${UPLINK}kbit \
>burst 6k prio 2
> ---
>
> In theorie everything should be fine now, 1:20 gets the whole line as long
> as 1:10 doesn't need any bandwidth.
>
> Problem: I have lag in quake!
If you read the htb pages, you can find some more info about delays. You can
try to give the quake class a lower prio.
> So what do you guys think?
>
> Is there any way to limit 1:20 to exactly 90% uplink, as soon as 1:10 has
> activity < 10% uplink? Then quake should have enough spare bandwidth. I
> tried lower burst settings without luck.
I don't think it's possible without external scripting.
Stef
--
[EMAIL PROTECTED]
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.openprojects.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] quake3 issues
Oops, > Here you go: > --- > DOWNLINK=2300 > UPLINK=2300 > DEV=eth0 This should read: DOWNLINK=768 UPLINK=128 DEV=eth0 pasted the wrong file, sorry. Greetings, Bjoern ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] quake3 issues
Hi,
I am using wshaper.htb from wondershaper 1.1a on 2.4.18 with htb2.
I have an adsl (german telekom) 128/768 line. I want to be able to play
quake3 all the time without lag, even when there are heavy uploads going on.
I decided to use the fwmark method, then my line is not influenced at all by
other minimize-delay TOS programs.
So I put marked all quake packets (-p udp --dport 2:35000 -J
MARK --set-mark 1).
Here you go:
---
DOWNLINK=2300
UPLINK=2300
DEV=eth0
# install root HTB, point default traffic to 1:20:
tc qdisc add dev $DEV root handle 1: htb default 20
# shape everything at $UPLINK speed - this prevents huge queues in your
# DSL modem which destroy latency:
tc class add dev $DEV parent 1: classid 1:1 htb rate ${UPLINK}kbit \
burst 6k
# high prio class 1:10:
tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
burst 6k prio 1
# bulk & default class 1:20 - gets slightly less traffic,
# and a lower priority:
tc class add dev $DEV parent 1:1 classid 1:20 htb \
rate $[9*$UPLINK/10]kbit burst 6k prio 2
# all get Stochastic Fairness:
tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev $DEV parent 1:20 handle 20: sfq perturb 10
# filters: quake and ping
tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 1 fw \
flowid 1:10
tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
match ip protocol 1 0xff flowid 1:10
---
So far, so good.
The only problem I have is that, if I dont play quake, all the normal
traffic gets only 90% of my line speed ($[9*$UPLINK/10] kbit). But I want
that traffic to get 100%, but only if I dont play).
Ok, then i modified the 1:20 class to have a ceil statement:
---
tc class add dev $DEV parent 1:1 classid 1:20 htb \
rate $[9*$UPLINK/10]kbit ceil ${UPLINK}kbit \
burst 6k prio 2
---
In theorie everything should be fine now, 1:20 gets the whole line as long
as 1:10 doesn't need any bandwidth.
Problem: I have lag in quake!
So what do you guys think?
Is there any way to limit 1:20 to exactly 90% uplink, as soon as 1:10 has
activity < 10% uplink? Then quake should have enough spare bandwidth. I
tried lower burst settings without luck.
Thanks for your help.
Greetings,
Bjoern
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] HZ to be 1000 - 2.5.25 may have this
>From lwn.net: The current development kernel remains 2.5.24. Linus has not released any kernels - or surfaced on the linux-kernel mailing list - since before OLS and the Kernel Summit. Some patches are beginning to show up in his BitKeeper tree, however; they include some SCSI updates, an NTFS update, and, interestingly, a change of the internal x86 clock frequency to 1000 Hz. 1000Hz would mean great things for us shaping people! Also, on a related note, see this on 'firm timers': http://www.cse.ogi.edu/~luca/firm.html More on http://www.cse.ogi.edu/~ashvin/ Thanks for Erik Walthinsen for pointing this out . Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Re: htb
Ok here is solution. 1) the filter is not swallowed. For inner filters you have to use "tc filter show dev lo parent 1:1". If you miss parent keyword nothing will be shown. 2) the code you attached can't work. You wanted to use "default" keyword to direct packets into 1:1 and then use filter attached to 1:1. It can't be done. default is resolved as last instance and MUST point to a LEAF. No other resolution is done then. To solve your prob use catchall u32 filter (src 0.0.0.0 0 f.e.). on 1: and flowid 1:1. devik On Mon, 1 Jul 2002, Oswald Buddenhagen wrote: > On Mon, Jul 01, 2002 at 04:46:12PM +0200, Martin Devera wrote: > > probably I can. but you have to create test case as simple as > > possible. > > > it can't get simpler than the attached, i guess ... :) > as opposed to my previous observations, filters attached to classes of > of the root qdisc are "swallowed" as well (that means, they don't even > show up in "tc filter show dev eth0"). > > > I can't dig thru long codes .. no time. you know .. > > > yeah, i know this pain. > > greetings > > -- > Hi! I'm a .signature virus! Copy me into your ~/.signature, please! > -- > Chaos, panic, and disorder - my work here is done. > ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Allowing CVS, RCP & SCP
bert hubert said: > On Thu, Jul 04, 2002 at 02:01:07PM +0100, Alex Bennee wrote: >> A. Peter Mee said: >> > >> > Could someone give me some pointers to achieving stable cvs and rcp >> > access through a fairly restrictive firewall. >> > >> >> CVS isn't a network protocol. You generally run it using remote shell >> tools, in the CVS manual it allows you to specifify how with the >> CVS_RSH evrionment variable. > > CVS 'pserver' lives on port 2401. Use netstat -an to see which ports > have LISTENing sockets, and open up those ports. Quite correct of course. There are numerous ways of accessing remote CVS repositries (see http://www.cvshome.org/docs/manual/cvs_2.html#SEC26). CVS over ssh seems to be the preffered method of large development communities (sourceforge and savanah at least). Once you've got ssh working you don't need to do any additional (network level) work to get CVS running. I would generally be wary of just opening up ports that are listening without being aware of the security implications of using that protocol. The CVS documentation suggests Kerboros over pserver for security. ssh works just as well (the documention only refers to rsh which isecure but replaceable by ssh). Alex www.bennee.com/~alex/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Re: Is my comprehend right?
Ok, I cc it to lartc as it can be of general interest.
ffz is Find First Zero. So that it is index of first LSB
zero. In ffs indexes starts with 1 in ffz with 0.
It can be used to do some action for each zero (or one)
bit in integer.
The simplest code do do f() for each zero bit in x is:
unsigned int x,m=1,i=0;
for(;m < 0x8000; m <<= 1,i++)
if ((m & x) == 0) f(i)
The code above will take about 32*4 x86 instructions
(and,jz,shl,jnc). There is possibility to write this in
paralel fashion but GCC will not do it. In direct implementation
of code there is little ILP (only jz+shl) so that is will
take at least 128 CPU cycles (not counting f).
When there is not many zeros in x the code above will
be ineffecient. Let's rewrite it:
while (x != 0x) {
int i = ffz(x);
f(i);
x |= (1< devik,hello!
>
> I read the man page of ffs() and looked ffz() in Linux kernel code, and then I
>queried the assembly code
>
> "asm ("cntlzw %0,%1" : "=r" (lz) : "r" (x));"
>
> in the __ilog2() in Linux kernel codethrough google.com.
>
> I think that ffz(int value) return the number of consecutive zero bit in the value
>from leftmost.
>
> Is my comprehend right?
>
> But could you explain why ffz() is used in htb_dequeue()?
>
> I think I can understand the same usage in CBQ code with your help.
>
> Thanks.
>
> === 2002-07-04 10:52:00 you wrote:===
>
> >find first zero. See man ffs - ffz is negated one with
> >a bit different return value.
> >I remember I was thinking about it when I first read CBQ
> >source. I remember I've figured its function in hour or
> >so by reading headers ...
> >devik
> >
> >On Thu, 4 Jul 2002, Huang Xin Gang wrote:
> >
> >> devik,hello!
> >>
> >> Thanks for your reply before.
> >> Now I have another question for you:
> >> I found a function ffz() used in your code of HTB.
> >> I want to know why you use this function.
> >>
> >> I will be appreciate if you reply me.
> >>
> >> Thanks.
> >>
> >> === 2002-07-02 12:00:00 you wrote:===
> >>
> >> >you probably should grep in linux/include. Sorry
> >> >but finding definition of function is not so hard
> >> >task, is it ?
> >> >They translate to GCC3 branching hints.
> >> >devik
> >> >
> >> >On Tue, 15 Feb 2000, Huang Xin Gang wrote:
> >> >
> >> >> MartinŁŹhelloŁĄ
> >> >>
> >> >> Could you tell me the meaning of these two function?
> >> >> and what form can I change these functions into C langague?
> >> >>
> >> >> Thanks a lot!
> >> >>
> >> >> ĄĄbest regards!
> >> >>
> >> >>
> >> >> Huang Xin Gang
> >> >> [EMAIL PROTECTED]
> >> >> ĄĄ2000-02-15
> >> >>
> >>
> >> = = = = = = = = = = = = = = = = = = = =
> >>
> >>
> >> best regards!
> >>
> >>Huang Xin Gang
> >>[EMAIL PROTECTED]
> >>2002-07-04
> >>
>
> = = = = = = = = = = = = = = = = = = = =
>
>
> best regards!
>
>Huang Xin Gang
>[EMAIL PROTECTED]
> 2000-02-15
>
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] filter add to which of class
On Thu, Jul 04, 2002 at 04:22:08PM +0800, hanhbnetfilter wrote: > htb was used to control traffic > stuctrul is like that(default is 1:20): > > |1:100 >|--1:10| > 1:1| |1:110 >| >|--1:20 > > #AC="tc filter add dev eth0 protocol ip parent 1:0 > prio 1" > #$AC u32 match u32 0xac100b00 ff00 at 16 flowid > 1:10 > #$AC u32 match u32 0xac100b01 at 16 flowid > 1:100 > I copy a file to 172.16.11.1 > class 1:100 go into effect. > I copy a file to 172.16.11.2 > class 1:10 did not go into effect > but class 1:20 take effect. > if a class has sub class, can the filter be added to > this class? With recent versions of htb, yes. -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Load balancing
On Wed, Jun 26, 2002 at 05:06:36PM -0500, Greg Scott wrote: > I am trying to figure out how to do this: I've tried the howto but just become > hopelessly confused. (I don' think this is a problem in the howto, it's a problem > with my comprehension.) What you want is hard in general. > And I need the ability to change this policy at will, so I can let other departments > use the combined T1s as needed. Incoming or outgoing? Outgoing is pretty easy - just make policy rules to route traffic from different department differently, and use TEQL to distribute outgoing traffic. > I think I can figure out how to route based on the source network, that all makes > sense in the how-to. I can set up different routing tables based on the source IP > address/network. It's the load balancing that is making me crazy - how do I put > together a load-balancing mechanism for those combined T1s that makes sense? TEQL is probably your best bet. There is also the nano-howto by Julian Anastasov. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] advanced routing for traffic generator-like setup
On Mon, Jul 01, 2002 at 02:14:22AM +0200, Filip Sneppe wrote: > How does one set up advanced routing so that when > HostA sends a packet from 1.1.1.1 to 2.2.2.1, it > goes via HostB, and vice versa: a packet from > 2.2.2.1 to 1.1.1.1 also goes via HostB. Only by doing NAT at HostB. Linux is way to smart for this to work otherwise :-) Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] tc reliably hangs my system
On Thu, Jul 04, 2002 at 01:07:08PM +0300, Dimitris Zilaskos wrote: > > ok , this 2 lines repated anything from 5 to 20 times cause the hang : > > tc qdisc del dev eth0 ingress > tc qdisc add dev eth0 handle : ingress > > again , the presence of sustained outgoing traffic catalyses the effect . > It takes at least 150-200 kbytes/sec to easily cause the hang . I've forwarded this to the right kernel people - your description is specific enough, so I have good hope that this bug will be spotted soon! Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] how to control bridge traffic using imq
On Thu, Jul 04, 2002 at 04:00:22PM +0800, hanhbnetfilter wrote: > bridge was configured with "brctl" > three NIC was bind to br0 > imq and htb was used to control traffic. > #modprobe imq numdevs=3 > "htb scripts" > #iptables -t mangle -A PREROUTING -i br0 -j IMQ > --todev 1 > #ip link set imq1 up > but this can not do the traffic controling. > please tell me how can i do iptables does not function on bridge devices - there are reasons for this, I'm seeing if I can push the right people into submitting a patch though. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Allowing CVS, RCP & SCP
On Thu, Jul 04, 2002 at 02:01:07PM +0100, Alex Bennee wrote: > A. Peter Mee said: > > Hi all, > > > > Could someone give me some pointers to achieving stable cvs and rcp > > access through a fairly restrictive firewall. I'm using a 2.4.18 > > kernel which defaults to dropping everthing, then punching holes where > > needed and SNATting the internal network. Single-socket protocols > > (http, smtp, pop3) do currently function correctly through the firewall > > so I'm assuming the cvs and rcp/scp protocols are not single-socket. > > The ftp and irc protocols also function correctly through the firewall. > > ssh is a single socket protocol. If you can ssh through your firewall then > you can use scp. You can even tunnel other ports over the single ssh > connection (e.g. X). > > CVS isn't a network protocol. You generally run it using remote shell tools, > in the CVS manual it allows you to specifify how with the CVS_RSH evrionment > variable. CVS 'pserver' lives on port 2401. Use netstat -an to see which ports have LISTENing sockets, and open up those ports. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services http://www.tk the dot in .tk http://lartc.org Linux Advanced Routing & Traffic Control HOWTO ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Allowing CVS, RCP & SCP
A. Peter Mee said: > Hi all, > > Could someone give me some pointers to achieving stable cvs and rcp > access through a fairly restrictive firewall. I'm using a 2.4.18 > kernel which defaults to dropping everthing, then punching holes where > needed and SNATting the internal network. Single-socket protocols > (http, smtp, pop3) do currently function correctly through the firewall > so I'm assuming the cvs and rcp/scp protocols are not single-socket. > The ftp and irc protocols also function correctly through the firewall. ssh is a single socket protocol. If you can ssh through your firewall then you can use scp. You can even tunnel other ports over the single ssh connection (e.g. X). CVS isn't a network protocol. You generally run it using remote shell tools, in the CVS manual it allows you to specifify how with the CVS_RSH evrionment variable. r* tools are bad. Do you need them? > If something more specific about my configuration is needed, I'll be > happy to oblige. ;-) > > TIA > > Cheers, > > Pete Mee > > > ___ > LARTC mailing list / [EMAIL PROTECTED] > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ Alex www.bennee.com/~alex/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Allowing CVS, RCP & SCP
Hi all, Could someone give me some pointers to achieving stable cvs and rcp access through a fairly restrictive firewall. I'm using a 2.4.18 kernel which defaults to dropping everthing, then punching holes where needed and SNATting the internal network. Single-socket protocols (http, smtp, pop3) do currently function correctly through the firewall so I'm assuming the cvs and rcp/scp protocols are not single-socket. The ftp and irc protocols also function correctly through the firewall. If something more specific about my configuration is needed, I'll be happy to oblige. ;-) TIA Cheers, Pete Mee ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] tc reliably hangs my system
ok , this 2 lines repated anything from 5 to 20 times cause the hang : tc qdisc del dev eth0 ingress tc qdisc add dev eth0 handle : ingress again , the presence of sustained outgoing traffic catalyses the effect . It takes at least 150-200 kbytes/sec to easily cause the hang . Regards , -- = Dimitris Zilaskos Department of Physics @ Aristotle Univercity of Thessaloniki , Greece = ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] filter add to which of class
htb was used to control traffic stuctrul is like that(default is 1:20): |1:100 |--1:10| 1:1| |1:110 | |--1:20 #AC="tc filter add dev eth0 protocol ip parent 1:0 prio 1" #$AC u32 match u32 0xac100b00 ff00 at 16 flowid 1:10 #$AC u32 match u32 0xac100b01 at 16 flowid 1:100 I copy a file to 172.16.11.1 class 1:100 go into effect. I copy a file to 172.16.11.2 class 1:10 did not go into effect but class 1:20 take effect. if a class has sub class, can the filter be added to this class? _ Do You Yahoo!? ÒøÐоÞÍ·¾Û»áÖÐÔ ´óÀËÌÔ¡®½ð¡¯Ë½«Ð¦°Á http://sweepstakes.yahoo.com/bank_surveywave2/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] tc reliably hangs my system
On Wed, 3 Jul 2002, Stef Coene wrote: > I ran both scripts for 10 minutes (while true; do ./test.sh; sleep 5; done) > and no freeze for me. > > Stef I woke up early today to do some more tests . The hang occurs if there is substantial traffic to the box running the scripts , ie around 300 kb/sec sustained outgoing traffic . The box serves as ftp server . I could not freeze it while the ftp daemon was not running (pureftpd) . When I started the ftp daemon and traffic began to flow , again running the scripts 7-8 times resulted in a frozen system . I am trying to find out the specific command that causes the problem Regards , -- = Dimitris Zilaskos Department of Physics @ Aristotle Univercity of Thessaloniki , Greece = ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] how to control bridge traffic using imq
bridge was configured with "brctl" three NIC was bind to br0 imq and htb was used to control traffic. #modprobe imq numdevs=3 "htb scripts" #iptables -t mangle -A PREROUTING -i br0 -j IMQ --todev 1 #ip link set imq1 up but this can not do the traffic controling. please tell me how can i do _ Do You Yahoo!? ÒøÐоÞÍ·¾Û»áÖÐÔ ´óÀËÌÔ¡®½ð¡¯Ë½«Ð¦°Á http://sweepstakes.yahoo.com/bank_surveywave2/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
