Re: [LARTC] Filtering with MAC Address

2002-08-01 Thread Adam B. Fineberg

> You can filtering on source mac address with iptables : -m
mac --mac-source
> xx:xx:xx:xx:xx:xx.  That you wat you can mark the packets with -j MARK
> --set-mark 123 and use the fw filter.

My problem was I need to filter on the destination mac address and I
couldn't figure a way to do that.  Is there a --mac-destination?

Adam

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Filtering with MAC Address

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 21:07, Adam B. Fineberg wrote:
> Marcio Fraisleben Dias wrote:
> >Can someone help me to do 'tc filter' by MAC Address? I use HTB in my
> > setup and it works wonderfully for IP, but I need to shape NAT
> > connections, and I can't do it using IP addresses. Any suggestions
> > welcome!
>
> I was never able to figure it out either so if someone can help with
> this I'd appreciate it.
You can filtering on source mac address with iptables : -m mac --mac-source 
xx:xx:xx:xx:xx:xx.  That you wat you can mark the packets with -j MARK 
--set-mark 123 and use the fw filter.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.oftc.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Filtering with MAC Address

2002-08-01 Thread Adam B. Fineberg

Marcio Fraisleben Dias wrote:

>Can someone help me to do 'tc filter' by MAC Address? I use HTB in my setup
>and it works wonderfully for IP, but I need to shape NAT connections, and I
>can't do it using IP addresses. Any suggestions welcome!
>

I was never able to figure it out either so if someone can help with 
this I'd appreciate it.

Best regards,
Adam Fineberg

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Request

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 09:43, anish_46628 wrote:
> Hi *,
>
> I have the enabled my kernel with the QoS options and to support
> diffserv. I want to test whether it is working fine or not. Please
> suggest me how can i check that my kernel is supporting diffserv
> or not.
Just try to execute some tc commands like 
tc qdisc show
And I hope you don't get any errors.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.oftc.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] HTB parent rates and ceils

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 10:54, Nils Lichtenfeld wrote:
> Hello @all, hello Devik!
>
> Whe have got a little confusion here. What of the following statements is
> true?
>
> - The ceil of a class should always be at least as high as the sum of the
> rates of its children.
False
- The ceil of a class should always be at least as high as the maximum of the 
rates of its children : True
If you have a class with ceil 100 kbps and a child-class with a ceil 150kbps, 
the never be reached due to the ceil of the parent.

> - The rate of a class should always be at least as high as the sum of the
> rates of its children.
True
If you don't respect this rule, the setup may work.  I have to check this 
with Devik to be sure.  But respecting this rule makes it easier to figure 
out how the bandwidth will be distributed.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.oftc.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Many:Many NAT with DHCP external addresses

2002-08-01 Thread Gil Tolle


The thing is, I'm trying to work around an address assignment decision
made by my ISP. I'm running a local server on my side of the DSL line,
with an address statically assigned to be .9.220. Every other machine on
my side of the DSL is acquiring dynamic IP addresses in the .57.255 subnet
with a default gateway of .57.1, on the other side of the DSL link.  This
causes the unfortunate side effect of forcing all traffic between the
dynamically assigned machines and the statically assigned machine to
travel across the DSL, even though both machines are on the same ethernet.
In addition, if the DSL link goes down, as it tends to on occasion, the
dynamic machines cannot acquire addresses, and therefore cannot
communicate with the local server.

My idea is to use a NAT machine to manage the routing myself. I would like
to ensure that no traffic between local machines and the local server will
go over the DSL, without having to add special routes to each dynamic
client machine. I would also like to ensure that dynamic local machines
can contact the static local server, even when the DSL is down and they
cannot get DHCP addresses from the ISP's server. I would also like to keep
the statically assigned server accessible from the public Internet.

DHCP relay does not seem to solve the routing issue, and neither does the
bridging. And if I am resigned to using NAT, I'd like to make it Many:Many
NAT to avoid the occasional problems seen when using things like active
FTP and online games behind Many:1 NAT. Thus the rationale behind my
question.

Have I missed something obvious that might satisfy the constraints above?

Thanks,
Gil <[EMAIL PROTECTED]>


On Thu, 1 Aug 2002, Stef Coene wrote:

> On Thursday 01 August 2002 19:18, Gil Tolle wrote:
> > I'm interested in setting up a NAT machine between a local network and a
> > DSL-connected ISP. In order to avoid some of the problems with Many:1 NAT,
> > I would like to take advantage of the fact that my ISP is willing to issue
> > as many DHCP dynamic addresses as I ask for, possibly enabling me to set
> > up Many:Many NAT for my local machines. Currently, the machines are all on
> > the same switch as the bridging DSL modem and are acquiring DHCP addresses
> > on their own.
> >
> > Is there a way to configure iproute2 under Linux to acquire external IP
> > addresses from a DHCP server as needed, instead of selecting its own
> > external IP addresses from a given subnet?
> That's called a dhcp relay
> Or you can configure the linux box as a bridge.
>
> But this is not the right place for this issue.
>
> Stef
>
> --
>
> [EMAIL PROTECTED]
>  "Using Linux as bandwidth manager"
>  http://www.docum.org/
>  #lartc @ irc.openprojects.net
>
>

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Two adapter, One IP address

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 12:15, shen jing wrote:
> Hi,
>
> I have a question,  is it possible to assign one IP address to two
> ntework adapter installed on the same Linux box?
It's possible.

> Must we use NAT at gateway to enable such a reduant configuation?
If you want to read some about it, you can read the paper called "Some evil ideas 
about decentralised loadbalancing/clustering, with no 
single point of failure " on www.ds9a.nl.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.oftc.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Best relation (value) of rate and burst in TBF and HTB

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 12:39, Cheng Kwok Wing, William wrote:
> Hi,
>
> I'm going to setup a linux traffic control box and has
> decided to adapt HTB.
>
> What should be the best relation(value) of rate and
> burst? I mean the formula used to calculate burst give
> rate or vice verse.
>
> I think the bandwidth of NIC and CPU processing speed
> are also important in the calculation above. What else
> are important??
Rate and burst do not really influence the CPU.  The more classes you have, 
the more load it will give.  But I once shaped 5.000 parallel streams on a 
10mbit connection with 486, 25hz, 8MB ram.  I used htb and the box survived 
the test without the load becoming bigger then 1.00.
If you use latest htb, you only need a rate parameter.  The burst will be 
callulated for you.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.openprojects.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] bridge advice

2002-08-01 Thread Stef Coene

I have some remakst to make.
You can't use iptables on a linux bridge.  (I think there is a patch that you 
can, but I'm not sure).  And try to patch the kernel for htb (it's a 
replacement for cbq).  And maybe you can try to filter on mac-address so you 
don't need to know the ip-addresses.

Stef

On Thursday 01 August 2002 18:51, D. Stimits wrote:
> I'm about to set up a Linux bridge (kernel 2.4.18.x from Redhat 7.3)
> between a (future) cable modem and several machines in the house. Some
> of those machines are windows, mine is Linux (but dual boots to
> windows). Basically:
>
>   CABLE_MODEM (DHCP issues to each machine)
>
>|(eth0 -- outer)
>
>   LINUX_BRIDGE (not proxy, but is firewall on some ports)
>
>|(eth1 -- inner)
>
> 8_PORT_SWITCH
>
>|-Machine1
>|-Machine2
>
>...
>
>|-MachineN
>
> Except for my machine, the other machines will email and web browsing
> machines (I do cvs, ssh, remote web site editing, and write network game
> software in Linux, as well as play games under windows). My goal is
> similar to the cable modem "wonder shaper", but I'm not positive if
> maybe I need to expand on that, and am currently not familiar with the
> more advanced QoS and shaping abilities (I know they are there, I now
> have some docs, and a machine I will be able to test on soon),
> especially with respect to bridges. I want my machine to have low
> latency, but the other machines do not care about latency; all machines
> care about having a fair bandwidth.
>
> A problem I am thinking about (until I get my bridge done I can only
> think about it, can't test anything) is that each machine is assigned
> address via DHCP, so perhaps the Linux bridge will have to find a way to
> know which DHCP address is assigned to which physical machine. If I were
> to simply assign qualities to the inside interface (eth1), then the same
> QoS and general characteristics would apply to all machines...which I do
> not want, so it seems I must deal on a per-IP-address basis, or a
> per-port basis. For port 80 web traffic, this seems just fine. I could
> even assign a quality for telnet and ssh ports. However, if I suddenly
> decide that one machine wants different characteristics for a port, or
> if it is an unknown port (such as some games work with...they may not
> always use the same port, or they can use more than one port at once),
> this breaks. So I am wanting to deal with latency on a per-machine
> basis, and simply assign low latency to my machine in general, and fair
> bandwidth for all machines; perhaps after that, I could override for
> particular ports, and for example, make all machines use port 80 web
> traffic with higher latency, even on my machine (which is otherwise low
> latency).
>
> Is this reasonable with current 2.4.x kernels? Are there particular
> things to watch out for or look for, especially for a bridge?
>
> Also, I have used ipchains in the past, but it seems iptables will be
> the future. What parts of this depend on iptables versus ipchains (if
> any)? The iproute2 package seems to provide most of the features I'm
> looking at, but it is conceivable that the use of ipchains or iptables
> will interact.
>
> D. Stimits, stimits AT idcomm.com
>
> ___
> LARTC mailing list / [EMAIL PROTECTED]
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.openprojects.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Many:Many NAT with DHCP external addresses

2002-08-01 Thread Stef Coene

On Thursday 01 August 2002 19:18, Gil Tolle wrote:
> I'm interested in setting up a NAT machine between a local network and a
> DSL-connected ISP. In order to avoid some of the problems with Many:1 NAT,
> I would like to take advantage of the fact that my ISP is willing to issue
> as many DHCP dynamic addresses as I ask for, possibly enabling me to set
> up Many:Many NAT for my local machines. Currently, the machines are all on
> the same switch as the bridging DSL modem and are acquiring DHCP addresses
> on their own.
>
> Is there a way to configure iproute2 under Linux to acquire external IP
> addresses from a DHCP server as needed, instead of selecting its own
> external IP addresses from a given subnet?
That's called a dhcp relay
Or you can configure the linux box as a bridge.

But this is not the right place for this issue.

Stef

-- 

[EMAIL PROTECTED]
 "Using Linux as bandwidth manager"
 http://www.docum.org/
 #lartc @ irc.openprojects.net
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] Many:Many NAT with DHCP external addresses

2002-08-01 Thread Gil Tolle


I'm interested in setting up a NAT machine between a local network and a
DSL-connected ISP. In order to avoid some of the problems with Many:1 NAT,
I would like to take advantage of the fact that my ISP is willing to issue
as many DHCP dynamic addresses as I ask for, possibly enabling me to set
up Many:Many NAT for my local machines. Currently, the machines are all on
the same switch as the bridging DSL modem and are acquiring DHCP addresses
on their own.

Is there a way to configure iproute2 under Linux to acquire external IP
addresses from a DHCP server as needed, instead of selecting its own
external IP addresses from a given subnet?

Thanks,
Gil <[EMAIL PROTECTED]>



___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] bridge advice

2002-08-01 Thread D. Stimits

I'm about to set up a Linux bridge (kernel 2.4.18.x from Redhat 7.3) 
between a (future) cable modem and several machines in the house. Some 
of those machines are windows, mine is Linux (but dual boots to 
windows). Basically:

  CABLE_MODEM (DHCP issues to each machine)
   |
   |(eth0 -- outer)
  LINUX_BRIDGE (not proxy, but is firewall on some ports)
   |(eth1 -- inner)
   |
8_PORT_SWITCH
   |
   |-Machine1
   |-Machine2
   ...
   |-MachineN

Except for my machine, the other machines will email and web browsing 
machines (I do cvs, ssh, remote web site editing, and write network game 
software in Linux, as well as play games under windows). My goal is 
similar to the cable modem "wonder shaper", but I'm not positive if 
maybe I need to expand on that, and am currently not familiar with the 
more advanced QoS and shaping abilities (I know they are there, I now 
have some docs, and a machine I will be able to test on soon), 
especially with respect to bridges. I want my machine to have low 
latency, but the other machines do not care about latency; all machines 
care about having a fair bandwidth.

A problem I am thinking about (until I get my bridge done I can only 
think about it, can't test anything) is that each machine is assigned 
address via DHCP, so perhaps the Linux bridge will have to find a way to 
know which DHCP address is assigned to which physical machine. If I were 
to simply assign qualities to the inside interface (eth1), then the same 
QoS and general characteristics would apply to all machines...which I do 
not want, so it seems I must deal on a per-IP-address basis, or a 
per-port basis. For port 80 web traffic, this seems just fine. I could 
even assign a quality for telnet and ssh ports. However, if I suddenly 
decide that one machine wants different characteristics for a port, or 
if it is an unknown port (such as some games work with...they may not 
always use the same port, or they can use more than one port at once), 
this breaks. So I am wanting to deal with latency on a per-machine 
basis, and simply assign low latency to my machine in general, and fair 
bandwidth for all machines; perhaps after that, I could override for 
particular ports, and for example, make all machines use port 80 web 
traffic with higher latency, even on my machine (which is otherwise low 
latency).

Is this reasonable with current 2.4.x kernels? Are there particular 
things to watch out for or look for, especially for a bridge?

Also, I have used ipchains in the past, but it seems iptables will be 
the future. What parts of this depend on iptables versus ipchains (if 
any)? The iproute2 package seems to provide most of the features I'm 
looking at, but it is conceivable that the use of ipchains or iptables 
will interact.

D. Stimits, stimits AT idcomm.com

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] Two adapter, One IP address

2002-08-01 Thread Christian Hammers

On Thu, Aug 01, 2002 at 06:15:22PM +0800, shen jing wrote:
> I have a question,  is it possible to assign one IP address to two
> ntework adapter installed on the same Linux box?
Would the bonding driver support (kernel/network options) be an option
for you?

bye,

-christian-

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] htb qdisc on top of htb

2002-08-01 Thread Mihai RUSU

Heh I solved the "problem" with a litle filters modification, see below:

On Thu, 1 Aug 2002, Mihai RUSU wrote:

> Hi
>
> I tryed to use a htb qdisc/class on top of another htb qdisc/class as you
> can see bellow:
> #!/bin/bash
>
> tc="/sbin/tc"
>
> $tc qdisc del dev eth0 root
> $tc qdisc add dev eth0 root handle 1: htb default 40
> $tc class add dev eth0 parent 1: classid 1:1 htb rate 100Mbit burst 15k
>
> $tc class add dev eth0 parent 1:1 classid 1:10 htb rate 50Mbit burst 15k
> $tc class add dev eth0 parent 1:1 classid 1:20 htb rate 256Kbit burst 15k
> $tc class add dev eth0 parent 1:1 classid 1:30 htb rate 50Mbit ceil 100Mbit burst 15k
>
> $tc qdisc add dev eth0 parent 1:10 handle 10: htb default 20
> $tc class add dev eth0 parent 10: classid 10:1 htb rate 50Mbit burst 15k
>
> $tc class add dev eth0 parent 10:1 classid 10:10 htb rate 256Kbit
> $tc class add dev eth0 parent 10:1 classid 10:20 htb rate 1Mbit ceil 50Mbit
>


> $tc filter add dev eth0 parent 1: protocol ip u32 match ip dst 1.2.3.4/32 flowid 
>10:10
>
replaced the line above with:
$tc filter add dev eth0 parent 1: protocol ip u32 match ip dst 0.0.0.0/0 flowid 1:10
$tc filter add dev eth0 parent 10: protocol ip u32 match ip dst 1.2.3.4/32 flowid 10:10



Mihai RUSU

Disclaimer: Any views or opinions presented within this e-mail are solely
those of the author and do not necessarily represent those of any company,
unless otherwise specifically stated.

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] htb qdisc on top of htb

2002-08-01 Thread Mihai RUSU

Hi

I tryed to use a htb qdisc/class on top of another htb qdisc/class as you
can see bellow:
#!/bin/bash

tc="/sbin/tc"

$tc qdisc del dev eth0 root
$tc qdisc add dev eth0 root handle 1: htb default 40
$tc class add dev eth0 parent 1: classid 1:1 htb rate 100Mbit burst 15k

$tc class add dev eth0 parent 1:1 classid 1:10 htb rate 50Mbit burst 15k
$tc class add dev eth0 parent 1:1 classid 1:20 htb rate 256Kbit burst 15k
$tc class add dev eth0 parent 1:1 classid 1:30 htb rate 50Mbit ceil 100Mbit burst 15k

$tc qdisc add dev eth0 parent 1:10 handle 10: htb default 20
$tc class add dev eth0 parent 10: classid 10:1 htb rate 50Mbit burst 15k

$tc class add dev eth0 parent 10:1 classid 10:10 htb rate 256Kbit
$tc class add dev eth0 parent 10:1 classid 10:20 htb rate 1Mbit ceil 50Mbit

$tc filter add dev eth0 parent 1: protocol ip u32 match ip dst 1.2.3.4/32 flowid 10:10

The problem is I dont limited with 256 Kbit downloading from 1.2.3.4. If I
change flowid from 10:10 to 1:20 I do get shaped so its not from a filter
problem. Is it possible to use htb qdisc on top of htb qdisc ?

Thanks

PS: I am using last htb2


Mihai RUSU

Disclaimer: Any views or opinions presented within this e-mail are solely
those of the author and do not necessarily represent those of any company,
unless otherwise specifically stated.

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] Best relation (value) of rate and burst in TBF and HTB

2002-08-01 Thread Cheng Kwok Wing, William

Hi,

I'm going to setup a linux traffic control box and has
decided to adapt HTB.

What should be the best relation(value) of rate and
burst? I mean the formula used to calculate burst give
rate or vice verse.

I think the bandwidth of NIC and CPU processing speed
are also important in the calculation above. What else
are important??

Thanks a lot,
Willim

__
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] Two adapter, One IP address

2002-08-01 Thread shen jing


Hi,

I have a question,  is it possible to assign one IP address to two
ntework adapter installed on the same Linux box?
Must we use NAT at gateway to enable such a reduant configuation?


Thanks a lot.

Jing



___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



Re: [LARTC] shaping redirected traffic

2002-08-01 Thread Anton Yurchenko

[EMAIL PROTECTED] wrote:

>
>Hi I have the following situation :
>
>CableTV-NET (128-254)
>  | 
>  |(c0) 
>Cisco7233 -(s0)-> Internet
>  |(e0)
>  |
>QoS Server
>
>Now I will route all traffic coming from Cable-net to Internet trought the QoS server 
>AND then back from internet trought the QoS-Server again to the Cable-net, how I will 
>do is another matter, i have some ideas.. ( if u have ideas too mail directly to me, 
>i will be very glad if u can help me on this too  i'm still one week cisco user 
>:") ) but the main question is not this. I'm wondering will I be able to SHAPE 
>the traffic in both directions  My worries are that I'm using only one Ethernet 
>interface on the QoS-Server ? Do U have any ideas will I be able to do this ?
>
>Or I have to put 2 Ethernet cards on the QoS-Server, one for incoming and one for 
>outgoing traffic ? I don't want to do this :"[, it becomes too weird .
>One more thing I will use tcng (preffer it instead tc, 'cause i will have a very 
>complex setup and i worry if i use directly tc that i will mess everything)
>
>(I will probably get a separate serial-card (Frame realay), but it is not an option 
>at the moment and wont be soon)
>  
>
You can shape on one interface with no problems at all, just create for 
example one parent class for outbound and one for inbound packets, and 
use iptables with marks to place packets on respactive classes under 
those parent classes. Its just you have to set up the routes right. And 
that depends on you physical setup. If the interfaces of Cisco and QoS 
are connected directly, you could create two VLAN interfaces on linux 
and route traffic as if QoS box had 2 interfaces. Or if you have some 
switch that connects Cisco Cable-Net and QoS, than you just make Qos 
default gateway for Cable-Net and QoS default gateway is Cisco, and from 
Cisco route the Cable-Net networks to the QoS box.
Bottom line is that how the routing goes is dependent on your physical 
connections setup, but shaping on one interface is definitely possible :)

>Thanx alot in advance
>
>[EMAIL PROTECTED]
>PS. These days I'm very busy... but when i have free time i will redo the 
>2.4-NETWORK-DIAGRAM with some updates that Leonardo was so generous to send me...
>___
>LARTC mailing list / [EMAIL PROTECTED]
>http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
>  
>


-- 

Anton Yurchenko<[EMAIL PROTECTED]>
Digital Generation



___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



RE: [LARTC] Multipath route problem

2002-08-01 Thread William L. Thomson Jr.

Niels,

On Thu, 2002-08-01 at 01:14, [EMAIL PROTECTED] wrote:
> > After you apply the patches the Linux machine will need to be running NAT
> in some manor.
> > Because I have routers on each of my DSL lines I perform two 
> > rounds of NAT or PAT. One in each router, and then again in the Linux
> router.
> > In doing the NAT/PAT you will need to give the outgoing interface each of
> the 
> > IP's that your routers will be translating to.
> 
> Have that up and running alrady ... :-)

Your routers translation? Good, then you will need to do second round of
translation in the Linux box as well.

Also helps to act as a second in line firewall that is transparent from
the outside world.

The Linux box must perform translation at some point or no go. The
patches only work when translating.

> > You will also want to dial in your DNS to servers for each IP block, 
> > and load balance that as well.
> 
> What do you mean by that?

The docs from isc.org, the pdf will help. You may have to use a later
version of bind, 9.x not 8.x, but it may work in older ones as well.

Normally an A record looks like

domain.com. IN  A   ip

So all you will need is
domain.com. IN  A   ip1
IN  A   ip2

Which will use ip1 half the time, and ip2 the other half. In theory.

There are other params like the time for each one to last and etc.

Download this pdf doc on admin Bind and it should tell you what you will
need from there

http://www.nominum.com/resources/documentation/Bv9ARM.pdf

> Hope that the patches work when I get my hands on them :-)

They do, have you emailed Julian? He will send you the ones you will
need.

Without the patches things will not work correctly or at all. They are a
must not an option.

-- 
Sincerely,
William L. Thomson Jr.
Support Group
Obsidian-Studios Inc.
439 Amber Way
Petaluma, Ca. 94952
Phone  707.766.9509
Fax707.766.8989
http://www.obsidian-studios.com

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] HTB parent rates and ceils

2002-08-01 Thread Nils Lichtenfeld

Hello @all, hello Devik!

Whe have got a little confusion here. What of the following statements is true?

- The ceil of a class should always be at least as high as the sum of the rates of its 
children.

- The rate of a class should always be at least as high as the sum of the rates of its 
children.

Thank you!
Greetings, Nils

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



RE: [LARTC] Multipath route problem

2002-08-01 Thread niels

> After you apply the patches the Linux machine will need to be running NAT
in some manor.
> Because I have routers on each of my DSL lines I perform two 
> rounds of NAT or PAT. One in each router, and then again in the Linux
router.
> In doing the NAT/PAT you will need to give the outgoing interface each of
the 
> IP's that your routers will be translating to.

Have that up and running alrady ... :-)

> You will also want to dial in your DNS to servers for each IP block, 
> and load balance that as well.

What do you mean by that?

Hope that the patches work when I get my hands on them :-)

Regards, Niels
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



[LARTC] Request

2002-08-01 Thread anish_46628

Hi *,

I have the enabled my kernel with the QoS options and to support 
diffserv. I want to test whether it is working fine or not. Please 
suggest me how can i check that my kernel is supporting diffserv 
or not.


Waiting for reply.

Regards,
Anish Mehta.
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/