Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-11 Thread Andy Furniss
Graham Leggett wrote: Mohan Sundaram wrote: I've my misgivings with this scheme. What you are doing makes sense only if the number of connections is a constrained resource. If bandwidth is the constraint, then shaping by source IP irrespective of number of connections will do the job. As

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-11 Thread Oscar Mechanic
As Andy muted there are commercial products that will attempt to do this for you like Allot/Elacoya/DBAM the implementation and testing is where this scenarios fail. It sounds good in theory until you do it then all these odd network errors start occurring. Cause you are now in the debate as

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-11 Thread Jan Groenewald
Hi On Sat, Nov 04, 2006 at 07:08:04AM +0530, Mohan Sundaram wrote: What you are doing makes sense only if the number of connections is a constrained resource. If bandwidth is the constraint, then shaping by source IP irrespective of number of connections will do the job. As far as I've

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-05 Thread Andrew Beverley
What I would like to do instead is allow the user to use any protocol they like, with the caveat that attempting to open many connections simultaneously will result in a steadily decreasing share of the pipe, rather than a steadily increasing one. I solved this in a similar but slightly

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-04 Thread Graham Leggett
Mohan Sundaram wrote: I've my misgivings with this scheme. What you are doing makes sense only if the number of connections is a constrained resource. If bandwidth is the constraint, then shaping by source IP irrespective of number of connections will do the job. As far as I've seen,

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-04 Thread Peter Surda
Graham Leggett wrote: In the network in question, bandwidth is minimal (many many users sharing 512kbps). You could try WRR. It doesn't work by connection count, but works very well in scenario you described. Yours sincerely, Peter -- http://www.shurdix.org - Linux distribution for routers

[LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-03 Thread Graham Leggett
Hi all, I have been trying to investigate traffic shaping in an effort to solve the unfriendly network apps problem on a test network. I have a basis by which I'd like to shape traffic, but studying the howto doesn't uncover and existing qdisc that seems to fit what I would like to do.

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-03 Thread Stephen Hemminger
On Sat, 04 Nov 2006 02:09:03 +0200 Graham Leggett [EMAIL PROTECTED] wrote: Hi all, I have been trying to investigate traffic shaping in an effort to solve the unfriendly network apps problem on a test network. I have a basis by which I'd like to shape traffic, but studying the howto

Re: [LARTC] Strategy for penalising IPs with too many simultaneous sessions

2006-11-03 Thread Mohan Sundaram
Graham Leggett wrote: Hi all, I have been trying to investigate traffic shaping in an effort to solve the unfriendly network apps problem on a test network. I have a basis by which I'd like to shape traffic, but studying the howto doesn't uncover and existing qdisc that seems to fit what I