Re: load balancing

2005-02-03 Thread Daniel Hartmeier
On Fri, Feb 04, 2005 at 05:05:41PM +1100, Matt Pearce wrote: > Can someone tell me if the load balancing in PF divides the data amonst > the interfaces by packet or connection ?? > > ie for an outgoing request to a web server with 2x512/512 DSL > connection, someone requests a download of 20mb,

Re: session timeout

2005-02-03 Thread Daniel Hartmeier
On Thu, Feb 03, 2005 at 08:54:28PM -0800, Tucker Bradford wrote: > I'm experiencing a very annoying session timeout issue. Its most often > noticed when sshing to a host behind the firewall from off site. It > doesn't seem to happen when the connection is initiated from another > internal netwo

session timeout

2005-02-03 Thread Tucker Bradford
I'm experiencing a very annoying session timeout issue. Its most often noticed when sshing to a host behind the firewall from off site. It doesn't seem to happen when the connection is initiated from another internal network, but that could be due to some bi-directional pass rules. In any case,

Re: Problem with traffic shaping over multiples nics

2005-02-03 Thread Nicolas
On Thu, Feb 03, 2005 at 07:03:47PM +0100, Daniel Hartmeier wrote: > On Thu, Feb 03, 2005 at 06:39:16PM +0100, Nicolas wrote: > > > > MY QUESTIONS: > > > - Is it possible to set up a maximum bandwidth limit which would be > > > shared and borrowed by several queues acting on several physical > >

Re: Problem with traffic shaping over multiples nics

2005-02-03 Thread Daniel Hartmeier
On Fri, Feb 04, 2005 at 01:10:15AM +0100, Nicolas wrote: > Since it's not possible to shape inbound traffic on my multi-nics > bastion, will shapping outbound traffic be useful? Sure, if you have an ADSL (with less upstream than downstream bandwidth), you often saturate the upstream, and that aff

load balancing

2005-02-03 Thread Matt Pearce
Hi All, Can someone tell me if the load balancing in PF divides the data amonst the interfaces by packet or connection ?? ie for an outgoing request to a web server with 2x512/512 DSL connection, someone requests a download of 20mb, now will this 20mb be restricted to only one of the connection

Re: Problems with outgoing traffic shaping

2005-02-03 Thread Jochen Gensch
Daniel Hartmeier schrieb: > Watch the output of pfctl -vvsq while you send out traffic. Are counters > for the individual queues increasing? No, there are increasing: queue std_ext priq( red ecn default ) [ pkts: 6119 bytes:5709747 dropped pkts: 0 bytes: 0 ] [ qlength:

Re: Problems with outgoing traffic shaping

2005-02-03 Thread Daniel Hartmeier
On Thu, Feb 03, 2005 at 02:54:52PM +0100, Jochen Gensch wrote: > pass out quick on $dsl_device inet proto icmp from ($dsl_device) to any > keep state queue high_prio_ext > pass out quick on $dsl_device proto udp from ($dsl_device) to any port > 53 keep state queue high_prio_ext > pass out quick on

Re: Problem with traffic shaping over multiples nics

2005-02-03 Thread Nicolas
On Thu, Feb 03, 2005 at 07:03:47PM +0100, Daniel Hartmeier wrote: > On Thu, Feb 03, 2005 at 06:39:16PM +0100, Nicolas wrote: > > > > MY QUESTIONS: > > > - Is it possible to set up a maximum bandwidth limit which would be > > > shared and borrowed by several queues acting on several physical > >

Re: Problem with traffic shaping over multiples nics

2005-02-03 Thread Daniel Hartmeier
On Thu, Feb 03, 2005 at 06:39:16PM +0100, Nicolas wrote: > > MY QUESTIONS: > > - Is it possible to set up a maximum bandwidth limit which would be > > shared and borrowed by several queues acting on several physical > > interfaces? No. > > - If shaping inbound traffic on my multi-homed basti

Re: Problem with traffic shaping over multiples nics

2005-02-03 Thread Nicolas
On Wed, Feb 02, 2005 at 08:01:32PM +0100, Nicolas wrote: > Hello OpenBSD fans and pf experts! > > I have a problem setting up traffic shapping on OpenBSD. I will try to > explain it as clearly as possible. > > MY GOAL: > I plan to do some traffic shapping on my bastion which runs OpenBSD. > That

Re: Problems with outgoing traffic shaping

2005-02-03 Thread Michael Meyer
System is a FreeBSD 5.3-RELEASE by the way. As far as I know, the most recent version of pf etc has not been ported yet. Jochen

Problems with outgoing traffic shaping

2005-02-03 Thread Jochen Gensch
Hi there, I'm trying to do some traffic shaping on the outgoing interface. However it does only work for the incoming side... #Queues # altq on $dsl_device priq bandwidth 120Kb queue { std_ext, high_prio_ext, low_prio_ext } queue st

Re: macros and anchors SOLVED

2005-02-03 Thread Henning Brauer
* Peter Huncar <[EMAIL PROTECTED]> [2005-02-02 22:20]: > Is it planned to include the 'include keyword' ;o) into the next release? it is believed that anchors and the load anchor statement solve that more elegantly. -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL P