Tom and others - found the issue . . . running on CentOS 7, the kernel is set to not do rate estimation. To fix, you can:
echo 1 > /sys/module/sch_htb/parameters/htb_rate_est And then restart shorewall. Thank you, Tom, for all of your help . . . I am cooking with gas, now. Stonie On 11/07/2015 05:42 PM, Stonie R. Cooper wrote: > Tom - that helped considerably. So, now I see "Sent" field on a "tc -s > -d class show dev bond0" increment rapidly (I am purposefully running a > test of a lot of data to make sure it limits correctly) - but I am now > only missing one part of the output - rate: > > # tc -s -d class show dev bond0 > class htb 1:11 parent 1:1 leaf 2: prio 2 quantum 5619 rate 9216Kbit ceil > 10240Kbit burst 1597b/1 mpu 0b overhead 0b cburst 1598b/1 mpu 0b > overhead 0b level 0 > Sent 115238 bytes 227 pkt (dropped 0, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 0p requeues 0 > lended: 185 borrowed: 14 giants: 0 > tokens: 20140 ctokens: 18139 > > class htb 1:1 root rate 41000Kbit ceil 41000Kbit burst 1599b/1 mpu 0b > overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 7 > Sent 44381238 bytes 29467 pkt (dropped 0, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 0p requeues 0 > lended: 1900 borrowed: 0 giants: 0 > tokens: 4527 ctokens: 4527 > > class htb 1:12 parent 1:1 leaf 3: prio 1 quantum 1500 rate 1382Kbit ceil > 1536Kbit burst 1599b/1 mpu 0b overhead 0b cburst 1599b/1 mpu 0b overhead > 0b level 0 > Sent 44266000 bytes 29240 pkt (dropped 948, overlimits 0 requeues 0) > rate 0bit 0pps backlog 0b 120p requeues 0 > lended: 7959 borrowed: 1886 giants: 0 > tokens: -293545 ctokens: -369543 > > class sfq 3:3ad parent 3: > (dropped 0, overlimits 0 requeues 0) > backlog 595002b 120p requeues 0 > allot -4168 > > What do I need to do to make the instantaneous rate show other than > "rate 0bit 0pps backlog 0b 0p requeues 0"? > > Stonie > > On 11/07/2015 04:17 PM, Tom Eastep wrote: >> On 11/7/2015 12:46 PM, Tom Eastep wrote: >>> On 11/7/2015 10:28 AM, Stonie R. Cooper wrote: >>>> So, what am I doing incorrectly? >>>> >>> We will need to see the entire output of 'shorewall dump'. >>> >> Before you collect the dump, check a couple of things: >> >> - Verify that you currently have FORWARD_CLEAR_MARK=Yes. That would >> explain why it appears that marking isn't working. >> >> - Set MARK_IN_FORWARD_CHAIN=Yes or place ":F" after MARK(...) in your >> rules (I'm assuming that the two IP addresses in your marking rules are >> associated with hosts behind the firewall). >> >> -Tom -- Stonie Cooper Planetary Data, Inc. 1848 County Road 28 Prague, NE 68050 ph. 402-663-6599 bb. 678-920-0170 fx. 402-663-6588 ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
