[LARTC] [announce] iproute2 2.6.19-061214

2006-12-14 Thread Stephen Hemminger
This is an update to the iproute2 command set. It can be downloaded from: http://developer.osdl.org/dev/iproute2/download/iproute2-2.6.18-061214.tar.gz Repository: git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git For more info on iproute2 see: http://linux-net.osdl.org/

Re: [LARTC] Limit pps not just bandwidth (kbps) on ingress

2006-12-14 Thread Andy Furniss
Flechsenhaar, Jon J wrote: I want to limit pps (packets per second) not just bandwidth on the ingress side. I can do this using IP tables but I'm curious if there is a way to do this with TC. Thanks. I don't think so, maybe you could ask on netdev netdev@vger.kernel.org and/or jamal [EMAI

Re: [LARTC] Reassigning a flow to a different queue

2006-12-14 Thread Andy Furniss
drew einhorn wrote: I'd like to initially assign all http flows to a interactive priority queue. But if the cumulative amount of traffic exceeds a threshold, I'd like to reassign it to a low priority bulk queue. Say someone is doing an http download of a huge .iso. Is this possible? You could

Re: [LARTC] ADSL traffic shaping to improve latency

2006-12-14 Thread Andy Furniss
Eye of the Beholder wrote: Hello. I have a 1024/256kbit ADSL and tried to shape outgoing traffic in order to improve latency. Here is my config. UPLOAD_RATE="256" UPRATE="$[4*$UPLOAD_RATE/5]" (a little smaller) Depends on traffic - you may need to go smaller if there are lots of small packe

Re: [LARTC] About HFSC ?

2006-12-14 Thread Andy Furniss
Sébastien CRAMATTE wrote: Hello, I’ve read this Article avout VOIP and HFSC http://automatthias.wordpress.com/2006/06/30/hfsc-and-voip/ I’ve got few questions ? Considering this tc class add dev $DEV parent 1:1 classid 1:2 hfsc \ rt m1 ${UPLINK}kbit d 50ms m2 $[1*$UPLINK/10]kbit \ ls m1 ${UPL

Re: [LARTC] hfsc rule command problem

2006-12-14 Thread Andy Furniss
Thossapron Apinyapanha wrote: tc class add dev eth2 parent 1: classid 1:1 hfsc sc m2 1kbit If it's really 10mbit eth, 10mbit rate is too high. tc class add dev eth2 parent 1:11 classid 1:199 hfsc rt m1 3500kbit d 10s m2 500kbit ls m2 3500kbit ul m2 3500kbit tc qdisc add dev eth2 handle

[LARTC] hfsc rule command problem

2006-12-14 Thread Thossapron Apinyapanha
My hfsc rule .. tc qdisc add dev eth2 handle 1: root hfsc iptables -t mangle -N ms-all iptables -t mangle -N ms-all-chains iptables -t mangle -N ms-prerouting iptables -t mangle -A PREROUTING -j ms-prerouting iptables -t mangle -A ms-prerouting -j CONNMARK --restore-mark iptables -t mangle -A

RE: [LARTC] blocking traffic on the FORWARD chain using physdev

2006-12-14 Thread Oscar Mechanic
Are you sure you want to block ICMP how about PMTU ebtables -I FORWARD 1 -i eth0 -p ip --ip-protocol icmp On Thu, 2006-12-14 at 21:34 +0900, William Bohannan wrote: > Thanks for that. Would you be able to give a simple example on how to > block outgoing traffic using ebtables and icmp? as I g

RE: [LARTC] blocking traffic on the FORWARD chain using physdev

2006-12-14 Thread William Bohannan
Thanks for that. Would you be able to give a simple example on how to block outgoing traffic using ebtables and icmp? as I get an error when using icmp? ebtables -A FORWARD -i eth1 -p icmp -j DROP Error message - "Problem with the specified protocol." Kind Regards William -Original Mes

Re: [LARTC] blocking traffic on the FORWARD chain using physdev

2006-12-14 Thread Oscar Mechanic
Hi Physdev may no longer be supported soon something to do with hooks and how this is difficult to support. I have stopped using it cause I found some odd behavior in physdev-in, out seemed fine I remember. I use ebtables and marks for this now. On Thu, 2006-12-14 at 20:55 +0900, William Boha

Re: [LARTC] SIP, NAT, and load balancing problems

2006-12-14 Thread François Delawarde
I have ip_nat_sip compiled in the kernel (and not as a module). Is that an issue? Could you give me an example of how I could do using CONNMARK and fwmark based routing if I have an outgoing RTP flow bound to the wrong interface? Thanks a lot, François. Patrick McHardy wrote: François Delaw

[LARTC] blocking traffic on the FORWARD chain using physdev

2006-12-14 Thread William Bohannan
Currently using physdev on a bridge to try and isolate certain paths across and to the bridge. It all works except when trying to stop the flow in one direction on the FORWARD chain?? Can someone please help?? Below is the testing done so far. eth1 <---> BRIDGE <---> eth0 # Block (eth0 ---> eth

Re: [LARTC] SIP, NAT, and load balancing problems

2006-12-14 Thread François Delawarde
I unfortunately think that I can't use that solution (if I understood it well). My box actually has two functions, it's an Asterisk box and a load balancing router. For LAN clients, as this box represents their default gateway, there would be no problem in implementing a pure routing solutio