[LARTC] Debian Sarge Server with iptables behind D-Link Router

2006-01-30 Thread Ralph Brugger
Hi, I have the shown (end of this post) net work configuration. In a "few" words: My Debian Sarge server is connected to a D-Link ADSL Router (DSL-562T). DMZ is enabled for the Debian Sarge IP on the Router. My Linux server has two NIC's. ethlan = internal Net ethdsl = external -> D-Link My Lin

[LARTC] Shared ADSL SHAPER

2006-01-30 Thread Rasmus Melgaard
Hi, I'm trying to make a shaper / firewall to improve sharing of bandwidth on a ADSL (3mbit down / ½ mbit up) Since the ADSL is very asymmetric, down is unimportant, I make a ingress rate limit shaper to ensure, all shaping is at the Shaper, and not on the Router or the ISP. The Idea is then

[LARTC] conntrack event/hook when 'expected' connection terminates ?

2006-01-30 Thread iler_ml
Hello, I need to understand how conntrack_core.c handles the termination of 'expected' connection; handling in the case when 'expected' connection arrived, then terminates (In my conntrack module, I need to specially handle the event of termination termination of 'expected' connection.) In ip_

[LARTC] loadbalancing multipath routing frequently freezes udp connections

2006-01-30 Thread Peter Warasin
hi i recently searched in the mailinglist archive and found similar problems, whose solutions helped very much, thank you. i have the following scenario: a firewall with one lan interface eth0 10.1.1.1/24 and two uplink interfaces eth1 10.2.2.1/24 eth2 10.3.3.1/24 each uplink interface does SNA

Re: [LARTC] u32 match versus iptables CLASSIFY target - performance

2006-01-30 Thread Dmytro O. Redchuk
On Mon, Jan 30, 2006 at 05:44:17PM +0200, Cristian Carstea wrote: > > > On Mon, Jan 30, 2006 at 02:15:02PM +0200, Cristian Carstea wrote: > >> hello, > >> > >> i have a question: > >> - which one is faster: "tc filter with u32 match per dst ip" or > "iptables match per dst ip with target CLASSIFY"

Re: [LARTC] u32 match versus iptables CLASSIFY target - performance

2006-01-30 Thread Cristian Carstea
> On Mon, Jan 30, 2006 at 02:15:02PM +0200, Cristian Carstea wrote: >> hello, >> >> i have a question: >> - which one is faster: "tc filter with u32 match per dst ip" or "iptables match per dst ip with target CLASSIFY"? >> - this question is for large rulesets (over 500) > > use hashes if it's pos

Re: [LARTC] P4 dual core vs AMD64 dual core with HTB

2006-01-30 Thread Paweł Staszewski
Hi All, Please for some advice. I have Linux router that do traffic control with HTB , routing and traffic counting. currently machine is with P4 2.2GHZ 1GB RAM. I plan to migrate to dual core CPU. I know well P4 dual core but is it anybody has experience with AMD64 dual core / or single core /

Re: [LARTC] P4 dual core vs AMD64 dual core with HTB

2006-01-30 Thread Carl-Daniel Hailfinger
Hi, foxy 202 schrieb: > > I have Linux router that do traffic control with HTB , routing and traffic > counting. > currently machine is with P4 2.2GHZ 1GB RAM. I plan to migrate to dual core > CPU. I know well > P4 dual core but is it anybody has experience with AMD64 dual core / or > single core

Re: [LARTC] HTB prio question

2006-01-30 Thread Andreas Klauer
On Mon, Jan 30, 2006 at 02:35:36PM +0200, Anton Glinkov wrote: > Is the prio specification in the htb class global or is it on a per class > basis? A simple example: > > class 1:10 parent 1: > class 1:130 parent 1:10 prio 3 > > class 1:170 parent 1:10 prio 7 > class 1:171 parent 1:170 prio 1 > cl

Re: [LARTC] P4 dual core vs AMD64 dual core with HTB

2006-01-30 Thread Paul M.
In general the dual core Opterons tend to be a lot faster than the P4 dual cores. But its possible that this has changed since I last saw a performance comparison of the two. -Paul On 1/30/06, foxy 202 <[EMAIL PROTECTED]> wrote: > > > Hi All, > > Please for some advice. > > I have Linux router

[LARTC] P4 dual core vs AMD64 dual core with HTB

2006-01-30 Thread foxy 202
Hi All, Please for some advice. I have Linux router that do traffic control with HTB , routing and traffic counting.currently machine is with P4 2.2GHZ 1GB RAM. I plan to migrate to dual core CPU. I know wellP4 dual core but is it anybody has experience with AMD64 dual

Re: [LARTC] Suggestions for a new shaper

2006-01-30 Thread Kenneth Kalmer
On 1/30/06, Peter Surda <[EMAIL PROTECTED]> wrote: > Kenneth Kalmer wrote: > > Guys > Hi, Hi Peter > > First the case study. An untrusted network with over-subscribed users > > (and abusers). Common at universities and bigger enterprises. People > > want good speed at any time, but abusers should

[LARTC] HTB prio question

2006-01-30 Thread Anton Glinkov
Hello Is the prio specification in the htb class global or is it on a per class basis? A simple example: class 1:10 parent 1: class 1:130 parent 1:10 prio 3 class 1:170 parent 1:10 prio 7 class 1:171 parent 1:170 prio 1 class 1:172 parent 1:170 prio 2 Which class will get excessive bandwidth fi

Re: [LARTC] u32 match versus iptables CLASSIFY target - performance

2006-01-30 Thread Dmytro O. Redchuk
On Mon, Jan 30, 2006 at 02:15:02PM +0200, Cristian Carstea wrote: > hello, > > i have a question: > - which one is faster: "tc filter with u32 match per dst ip" or "iptables > match per dst ip with target CLASSIFY"? > - this question is for large rulesets (over 500) use hashes if it's possible to

Re: [LARTC] Suggestions for a new shaper

2006-01-30 Thread Peter Surda
Kenneth Kalmer wrote: Guys Hi, First the case study. An untrusted network with over-subscribed users (and abusers). Common at universities and bigger enterprises. People want good speed at any time, but abusers should be detected and clamped down automatically. This system needs intelligence.

[LARTC] u32 match versus iptables CLASSIFY target - performance

2006-01-30 Thread Cristian Carstea
hello, i have a question: - which one is faster: "tc filter with u32 match per dst ip" or "iptables match per dst ip with target CLASSIFY"? - this question is for large rulesets (over 500) thank you, cristian carstea ___ LARTC mailing list LARTC@mailman

Re: [LARTC] tc qdisc ingress problem ?

2006-01-30 Thread Laurent Haond
Laurent Haond a écrit : >Hi, all > >I've got problems with tc qdisc ingress. >I'm using vanillia kernel 2.6.14.4 patched with >http://www.ssi.bg/~ja/routes-2.6.14-12.diff, and iproute2-2.6.14-051107. > >i am using ingress to limit incoming traffic : >(DEV is eth1 / DOWNLINK is 7700) > ># attach i

[LARTC] Suggestions for a new shaper

2006-01-30 Thread Kenneth Kalmer
Guys Reading through my lartc mail, and thinking on how to tackle my next shaping solution, gave me an idea. I'd like to propose this idea for scrutiny and if it sounds viable I'll definitely need to start developing in due time. For me in my day to day work with developing network application sp