[freenet-support] Bandwidth limiting of outgoing traffic...

2005-08-08 Thread Evert Meulie

Hi all!

Has anyone been able to accurately shape the bandwidth consumption of 
freenet traffic leaving your server? I know there are options in 
freenet.conf, but it seems that these are either ignored totally or at 
the very least not very strictly abided by...


Since Freenet uses random ports for outgoing traffic, I can't really 
shape it on my firewall either. (I do have an option to shape traffic 
based on packet content. Do all Freenet packages have some common, 
unique content perhaps?)


The Freenet site suggested to control the bandwidth usage on the 
OS-level instead. Who can tell me how to do this?



Regards,
Evert

___
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:[EMAIL PROTECTED]


Re: [freenet-support] Bandwidth limiting of outgoing traffic...

2005-08-08 Thread Matthew Toseland
On Thu, Aug 04, 2005 at 10:06:04PM +0200, Evert Meulie wrote:
 Hi all!
 
 Has anyone been able to accurately shape the bandwidth consumption of 
 freenet traffic leaving your server? I know there are options in 
 freenet.conf, but it seems that these are either ignored totally or at 
 the very least not very strictly abided by...

Really? Last time I tested it, outputBytes seemed to work okay. You
_did_ set it in bytes per second, correct? And to what level are you
trying to limit it?
 
 Since Freenet uses random ports for outgoing traffic, I can't really 
 shape it on my firewall either. (I do have an option to shape traffic 
 based on packet content. Do all Freenet packages have some common, 
 unique content perhaps?)

They shouldn't. Sadly they do at the moment (well not individual
packets, but connections), but they won't in future.
 
 The Freenet site suggested to control the bandwidth usage on the 
 OS-level instead. Who can tell me how to do this?
 
 
 Regards,
   Evert
-- 
Matthew J Toseland - [EMAIL PROTECTED]
Freenet Project Official Codemonkey - http://freenetproject.org/
ICTHUS - Nothing is impossible. Our Boss says so.


signature.asc
Description: Digital signature
___
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:[EMAIL PROTECTED]

Re: [freenet-support] Bandwidth limiting of outgoing traffic...

2005-08-08 Thread Frank v Waveren
On Thu, Aug 04, 2005 at 10:06:04PM +0200, Evert Meulie wrote:
 Since Freenet uses random ports for outgoing traffic, I can't really 
 shape it on my firewall either. (I do have an option to shape traffic 
 based on packet content. Do all Freenet packages have some common, 
 unique content perhaps?)
 
 The Freenet site suggested to control the bandwidth usage on the 
 OS-level instead. Who can tell me how to do this?

On linux you can tag packets with the iptables MARK target based on
uid or pid, and then use tc (from iproute2) filters to select only the
marked packets. No icky looking inside packets required. 

If you're shaping traffic on a different machine than the one running
freenet it's slightly more complicated, as the iptables MARKs don't go
out on the network, they're just there while the local machine is
juggling the packet. What I do is encode the appropriate policy in the
TOS header with --set-tos in the mangle table based on a MARK I set
based on the uid. Then, on the machine that does the traffic shaping
you just prioritise or drop based on the tos field, optionally
resetting it before pushing it out on the wire.

Similar facilities are available on many other OSes.

-- 
Frank v Waveren  Key fingerprint: BDD7 D61E
[EMAIL PROTECTED]  5D39 CF05 4BFC 
F57A
Public key: hkp://wwwkeys.pgp.net/468D62C8  FA00 7D51 468D 62C8


signature.asc
Description: Digital signature
___
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:[EMAIL PROTECTED]