On 01/29/2018 05:40 PM, Alan McKay wrote: > AM1M-S2H Gigabyte mobo > AMD Athlon(tm) 5150 APU with Radeon(tm) R3 > 1.6Ghz > 4G RAM > > Is there any way traffic shaping is stuck on? > > Earlier in my debug process I was debugging my TC rules because I > thought I had it on :-) and when I was reading through some old mails > of mine to the list I saw you had me once send you the output of > > shorewall show tc > > So I dump that out and it shows a bunch of stuff - does not look like > an empty config. But I am 100% sure it is off in my shorewall config > and I have restarted many times. > > In fact when I turn it on in Shorewall config and try to use it, > things get MUCH slower. > > root@gigserver:~# shorewall show tc > Shorewall 4.5.21.6 Traffic Control at gigserver - Mon Jan 29 20:36:42 EST 2018 > > Chain PREROUTING (policy ACCEPT 5333K packets, 5199M bytes) > pkts bytes target prot opt in out source > destination > 5333K 5199M tcpre all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Chain INPUT (policy ACCEPT 40792 packets, 11M bytes) > pkts bytes target prot opt in out source > destination > 40792 11M tcin all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Chain FORWARD (policy ACCEPT 5276K packets, 5183M bytes) > pkts bytes target prot opt in out source > destination > 5276K 5183M MARK all -- * * 0.0.0.0/0 > 0.0.0.0/0 MARK and 0xffffff00 > 5276K 5183M tcfor all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Chain OUTPUT (policy ACCEPT 39803 packets, 7260K bytes) > pkts bytes target prot opt in out source > destination > 39803 7260K tcout all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Chain POSTROUTING (policy ACCEPT 5314K packets, 5190M bytes) > pkts bytes target prot opt in out source > destination > 5314K 5190M tcpost all -- * * 0.0.0.0/0 > 0.0.0.0/0 > > Chain tcfor (1 references) > pkts bytes target prot opt in out source > destination > > Chain tcin (1 references) > pkts bytes target prot opt in out source > destination > > Chain tcout (1 references) > pkts bytes target prot opt in out source > destination > > Chain tcpost (1 references) > pkts bytes target prot opt in out source > destination > > Chain tcpre (1 references) > pkts bytes target prot opt in out source > destination > 5333K 5199M MARK all -- * * 0.0.0.0/0 > 0.0.0.0/0 MARK set 0x3 > 5333K 5199M MARK all -- * * 0.0.0.0/0 > 0.0.0.0/0 MARK set 0x3 > 1089 275K MARK all -- * * 172.30.99.5 > 0.0.0.0/0 MARK set 0x1 > 0 0 MARK all -- * * 184.75.215.106 > 0.0.0.0/0 MARK set 0x1 > 0 0 MARK all -- * * 0.0.0.0/0 > 184.75.215.106 MARK set 0x1 > 0 0 MARK all -- * * 0.0.0.0/0 > 172.30.99.5 MARK set 0x1 > 0 0 MARK all -- * * 172.30.99.218 > 0.0.0.0/0 MARK set 0x4 > 0 0 MARK all -- * * 0.0.0.0/0 > 172.30.99.218 MARK set 0x4 > 1911 345K MARK icmp -- * * 0.0.0.0/0 > 0.0.0.0/0 icmptype 8 MARK set 0x2 > 876 74122 MARK icmp -- * * 0.0.0.0/0 > 0.0.0.0/0 icmptype 0 MARK set 0x2 > > Device eth0: > qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap 1 2 2 2 1 2 0 0 1 1 > 1 1 1 1 1 1 > Sent 6277855118 bytes 5010601 pkt (dropped 4070, overlimits 0 requeues 73086) > backlog 0b 0p requeues 73086 > > > Device eth1: > qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap 1 2 2 2 1 2 0 0 1 1 > 1 1 1 1 1 1 > Sent 1015903189 bytes 2335390 pkt (dropped 0, overlimits 0 requeues 17) > backlog 0b 0p requeues 17 >
There is noting there that is Shorewall traffic-shaping related. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
