[LARTC] Route away packets addressed to the machine itself w/iproute and Netfilter

2005-02-18 Thread Gerardo Arceri
I have a box with only 1 IP (lets say 10.0.0.1) which has an ipip tunnel to another machine (lets say 10.2.0.1)(different networks)  i wan't all packets coming to 10.0.0.1 destination port 80 be routed thru the tunnel device and be answered by 10.2.0.2 (which has an interface configured  with 1

Re: Re: [LARTC] HTB High CPU Utilization

2004-12-20 Thread Gerardo Arceri
or example, let's say you have 2000kbit of total bandwidth for output and that you are running both and http and an ftp server. Now let's say that you have two users that want to connect to your machine and that both of them can potentially use all of your output bandwidth. One of them want to conn

[LARTC] HTB High CPU Utilization

2004-12-19 Thread Gerardo Arceri
Hi, i'm running a Bridge/iptables firewall, with no tc filters configured CPU utilization barely reaches 1%, i had to rate limit one particular server outgoing traffic and setup a HTB scheme like this iptables -F PREROUTING -t mangle iptables -A PREROUTING -t mangle -p tcp -s 99.99.99.99 -j MA

[LARTC] SQUID + tc problems

2004-03-16 Thread Gerardo Arceri
I'm trying to limit bandwidth consumption of sites hosted behind a squid working as a reverse transparent proxy (squid 2.5.3 with Patrick McHardy tcp_outgoing_priority patch) but with traffic levels for a given site of 1Mbps, only about 1% of the traffic shows up in a tc -s -d. Anyone has exp

[LARTC] Squid-qos Patch Trouble

2004-03-05 Thread Gerardo Arceri
Hiya, i have a squid-2.5.4 transparent proxy working in http accelerator mode (i.e. web servers are behind the squid, and all www records point to the squid IP) and i want to implement some sort of bandwidth management so, for example, any given hosted website/server won't eat more than let's

[LARTC] tc classes limit

2004-01-30 Thread Gerardo Arceri
This may be answered somewhere but i tried googling for it with no luck, so... What's the limit on number of traffic classes (classid) you can define on Linux ? -- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/ ___ LARTC maili

Re: [LARTC] Problems with HTB (ceil being overpassed)

2004-01-29 Thread Gerardo Arceri
It seems you have hit timer innacuracy issues: http://www.docum.org/stef.coene/qos/faq/cache/40.html Recompiled the kernel with the PSCHED_CPU modification and now tc -s -d class show dev eth1 shows that the server is capped exactly at 312Kpbs (2500Kbit). BUT... read below quote.. From my limite

Re: [LARTC] Problems with HTB (ceil being overpassed)

2004-01-29 Thread Gerardo Arceri
curacy issues: http://www.docum.org/stef.coene/qos/faq/cache/40.html Rubens On Tue, 27 Jan 2004, Gerardo Arceri wrote: We run a Hosting farm behind a bridge/iptables firewall setup running Gentoo with kernel 2.4.20-gentoo-r6, connected to a dual 15Mbps international internet pipe / , as this: Ne

[LARTC] Problems with HTB (ceil being overpassed)

2004-01-27 Thread Gerardo Arceri
We run a Hosting farm behind a bridge/iptables firewall setup running Gentoo with kernel 2.4.20-gentoo-r6, connected to a dual 15Mbps international internet pipe / , as this: Net Pipe - eth1 Bridge/Firewall eth0 Internal Hosting Network lately we have been looking at htb to so