Re: [LARTC] Load Balance and SNAT problem.

2007-06-25 Thread Peter Rabbitson
Grant Taylor wrote: Could you give me a suggestion? Thanks. Do not use this method to load balance. Look in to Equal Cost Multi Path (a.k.a. ECMP) routing and specifying multiple default gateways on one route command. The kernel should try to load balance across the multiple default gate

Re: [LARTC] Using Julian Anastasov's 'routes' patches on 2.4 kernel in conjunction with IPSec

2007-06-25 Thread Julian Anastasov
Hello, On Mon, 25 Jun 2007, Seba Tiponut wrote: > I use Julian Anastasov 'routes' (to be more specific: static_routes, > alt_routes and nf_reroute) patches on a 2.4.32 kernel. On the same host I run > IPSec. I have discovered after a few hours of networking problems that, > when IPSec

Re: [LARTC] Load Balance and SNAT problem.

2007-06-25 Thread VladSun
John Chang написа: I am developing load balancing router, But I have a question about fail over. The follow diagram is my test environment and scripts. --- Environment Setting PC1(192.168.10.2 ) | (LAN) | PC2

[LARTC] Re: RED to use ECN (or work at all?)

2007-06-25 Thread Christian Benvenuti
Hi Daniel, >Dear Community, > >sorry for the somewhat dumb question. Maybe someone has any pointer >to how to setup the RED queue to mark pakets with ECN. In particular >what are appropriate parameter settings for limit, min, max, etc. > >All my trials end up with either "RTNETLINK answers: I

Re: [LARTC] Load Balance and SNAT problem.

2007-06-25 Thread Grant Taylor
On 06/24/07 22:07, John Chang wrote: iptables -t mangle -A PREROUTING -t mangle -j CONNMARK --restore-mark iptables -t mangle -A PREROUTING -m state --state NEW -m statistic --mode nth --every 2 --packet 1 -j MARK --set-mark 1 iptables -t mangle -A PREROUTING -m state --state NEW -m statistic -

[LARTC] RED to use ECN (or work at all?)

2007-06-25 Thread Daniel Schaffrath
Dear Community, sorry for the somewhat dumb question. Maybe someone has any pointer to how to setup the RED queue to mark pakets with ECN. In particular what are appropriate parameter settings for limit, min, max, etc. All my trials end up with either "RTNETLINK answers: Invalid argument

RE: [LARTC] Using Julian Anastasov's 'routes' patches on 2.4 kernel inconjunction with IPSec

2007-06-25 Thread Salim S I
I had the same problem. Had to disable ipsec interfaces to make things work. Though the routing rules were in correct order, packets went to ipsec interface. Finally, I removed the patch. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Seba Tiponut >

[LARTC] Using Julian Anastasov's 'routes' patches on 2.4 kernel in conjunction with IPSec

2007-06-25 Thread Seba Tiponut
Hello, I use Julian Anastasov 'routes' (to be more specific: static_routes, alt_routes and nf_reroute) patches on a 2.4.32 kernel. On the same host I run IPSec. I have discovered after a few hours of networking problems that, when IPSec is enabled on that patched kernel, inspecting packets with

Re: [LARTC] Why does scp stall on low bandwidth connections?

2007-06-25 Thread Nikolay Kichukov
Hello Andreas, and arp is not ip ... thanks for clarification. Where(in which class) would all non-ip traffic go in the filter scenario? Thanks, -Nikolay Andreas Unterkircher wrote: > The first one only recognize IP traffic, the line with default will > match any kind of traffic. > > Regards, >

Re: [LARTC] Why does scp stall on low bandwidth connections?

2007-06-25 Thread Andreas Unterkircher
The first one only recognize IP traffic, the line with default will match any kind of traffic. Regards, Andreas Quoting Nikolay Kichukov <[EMAIL PROTECTED]>: Hello Andy, Is that line: tc filter add dev eth0 parent 1:0 protocol ip prio 2 u32 match u32 0 0 flowid 1:2 not equal to: tc qdisc ad

Re: [LARTC] Why does scp stall on low bandwidth connections?

2007-06-25 Thread Nikolay Kichukov
Hello Andy, Is that line: tc filter add dev eth0 parent 1:0 protocol ip prio 2 u32 match u32 0 0 flowid 1:2 not equal to: tc qdisc add dev eth0 root handle 1:0 htb default 2 in terms of achieved results? If not, what is the difference? Thanks, -Nikolay Andy Furniss wrote: > Marc wrote: >> Hi, >