On 11/7/2015 10:28 AM, Stonie R. Cooper wrote: > I have checked through previous posts and followed the shorewall > documentation, and I cannot seem to get TC to work in the way that I am > familiar with in migrating to 4.6.x. > > To set the stage, I will provide my basic configuration and the output > (as well as what I was expecting). > > My tcdevices looks like this: > > ############################################################################### > #NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED > #INTERFACE INTERFACES > bond0 0 41mbit > > Then my tcclasses looks like this: > ############################################################################### > #INTERFACE:CLASS MARK RATE: CEIL PRIORITY > OPTIONS > # DMAX:UMAX > bond0 1 9216kbit 10240kbit 2 > default > # to the user > bond0 2 9216kbit 10240kbit 1 > > I had a tcrules from my old installation, and it looked like this: > ############################################################################### > #MARK SOURCE DEST PROTO PORT(S) CLIENT USER TEST > # PORT(S) > # From Home - default > 1 172.16.125.59,172.16.125.60 208.5.23.17 > all > # to the user > 2 172.16.125.59,172.16.125.60 155.172.8.23 > all > > When I fire it up, I see that I should run the update to make the mangle > file, which I do, and I end up with a mangle that looks like this: > > MARK(1) 172.16.125.59,172.16.125.60 208.5.23.17 all > MARK(2) 172.16.125.59,172.16.125.60 155.172.8.23 all > > So, where the issue lies is when I do a "shorewall show tc": > > ----------cut here from show tc----------------- > . . . . . > Chain tcpre (1 references) > pkts bytes target prot opt in out source > destination > 1178 3965K MARK all -- * * 172.16.125.59 > 208.5.23.17 MARK set 0x1 > 11415 32M MARK all -- * * 172.16.125.59 > 155.172.8.23 MARK set 0x2 > . . . . > class htb 1:11 parent 1:1 leaf 2: prio 2 quantum 5619 rate 9216Kbit ceil > 10240Kbit burst 1597b/1 mpu 0b overhead 0b cburst 1598b/1 mpu 0b > overhead 0b level 0 > Sent 37531046 bytes 31611 pkt (dropped 0, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 113p requeues 0 > lended: 11746 borrowed: 1468 giants: 0 > tokens: -23782 ctokens: -36935 > > class htb 1:1 root rate 41000Kbit ceil 41000Kbit burst 1599b/1 mpu 0b > overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 7 > Sent 37531046 bytes 31611 pkt (dropped 0, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 0p requeues 0 > lended: 1468 borrowed: 0 giants: 0 > tokens: -4357 ctokens: -4357 > > class htb 1:12 parent 1:1 leaf 3: prio 1 quantum 5619 rate 9216Kbit ceil > 10240Kbit burst 1597b/1 mpu 0b overhead 0b cburst 1598b/1 mpu 0b > overhead 0b level 0 > Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 0p requeues 0 > lended: 0 borrowed: 0 giants: 0 > tokens: 21687 ctokens: 19531 > ----------cut here from show tc----------------- > > First of all, the rate for 1:11 should not ever be 0 - there is always > data flowing. And 1:12 never shows anything. I am sure I am missing > something here, but I had used this tool in the past to make sure the > classes I defined were actually confined to the pipe size. I still have > the old firewall up and running, and on the exact same setup, I see a > lot more information for the classes: > > ----------cut here from show tc on old firewall ------------- > class htb 1:11 parent 1:1 leaf 11: prio 3 quantum 18432 rate 1536Kbit > ceil 2048Kbit burst 1499b/8 mpu 0b overhead 0b cburst 1499b/8 mpu 0b > overhead 0b level 0 > Sent 17296215990 bytes 103655258 pkt (dropped 2418, overlimits 0 > requeues 0) > rate 4080bit 4pps backlog 0b 0p requeues 0 > lended: 101539112 borrowed: 2111151 giants: 0 > tokens: 105797 ctokens: 79343 > > class htb 1:1 root rate 40960Kbit ceil 40960Kbit burst 1489b/8 mpu 0b > overhead 0b cburst 1489b/8 mpu 0b overhead 0b level 7 > Sent 45876115374254 bytes 2701723036 pkt (dropped 0, overlimits 0 > requeues 0) > rate 15337Kbit 1356pps backlog 0b 0p requeues 0 > lended: 3184349479 borrowed: 0 giants: 0 > tokens: 172 ctokens: 172 > > class htb 1:12 parent 1:1 leaf 12: prio 1 quantum 110592 rate 9216Kbit > ceil 10240Kbit burst 1498b/8 mpu 0b overhead 0b cburst 1497b/8 mpu 0b > overhead 0b level 0 > Sent 1692905979286 bytes 1860718919 pkt (dropped 1850026, overlimits 0 > requeues 0) > rate 35960bit 19pps backlog 0b 0p requeues 0 > lended: 1750660970 borrowed: 110057949 giants: 0 > tokens: 16875 ctokens: 15171 > ----------cut here from show tc on old firewall ------------- > > So, what am I doing incorrectly? >
We will need to see the entire output of 'shorewall dump'. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
