On 5/22/2015 3:48 PM, Tom Eastep wrote: > On 5/22/2015 2:18 PM, Antonio Eugenio Burriel wrote: >> Hi, >> >> Shorewall 4.6.4.3 here, but same code present in up to 4.6.10Beta2. >> >> Let's define the following providers: >> DSL1 1 0x10000 - dsl0 192.168.1.1 >> track,balance,load=0.25 >> DSL2 2 0x20000 - dsl1 192.168.2.1 >> track,balance,load=0.25 >> #DSL3 3 0x30000 - dsl2 192.168.3.1 >> track,balance,load=0.50 >> Last one disabled because its normalized probability goes over 1. > It isn't disabled in the Shorewall sense -- it doesn't exist as far as > Shorewall know! And what do you mean that "its normalized probability > goes over 1"? > If you mean that the *sum* of the normalized probabilities exceeds 1.0, that is to be expected. Remember that those packets that have been given a mark for an interface are not passed on to the rule for the remaining interfaces . So, in your example with DSL3 'enabled', the normalized probabilities are:
DSL1 = 0.25000000 DSL2 = 0.33333333 DSL3 = 1.00000000 25% of unmarked packets will match DSL1. That leaves 75% to be passed to the DSL2 rule. 33...% of 75% is 25% which is the specified probability of DSL2. If neither the DSL1 nor DSL2 rule assigns a mark then we must assign DSL3's mark; hence DSL3 has a 100% normalized probability. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
