From owner-freebsd-pf@FreeBSD.ORG Sun Oct 23 00:54:34 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4FAD316A41F for ; Sun, 23 Oct 2005 00:54:34 +0000 (GMT) (envelope-from brunomiguel@dequim.ist.utl.pt) Received: from gecea.ist.utl.pt (gecea.ist.utl.pt [193.136.140.145]) by mx1.FreeBSD.org (Postfix) with ESMTP id D683B43D45 for ; Sun, 23 Oct 2005 00:54:33 +0000 (GMT) (envelope-from brunomiguel@dequim.ist.utl.pt) Received: from [66.30.10.101] (c-66-30-10-101.hsd1.ma.comcast.net [66.30.10.101]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by gecea.ist.utl.pt (Postfix) with ESMTP id 4527C410B; Sun, 23 Oct 2005 01:54:32 +0100 (WEST) Message-ID: <435ADF39.90700@dequim.ist.utl.pt> Date: Sat, 22 Oct 2005 20:54:17 -0400 From: Bruno Afonso User-Agent: Thunderbird 1.4 (Windows/20050908) MIME-Version: 1.0 To: Bill Marquette References: <000b01c5d644$54527f20$0132a8c0@delta> <4359ED5B.7010303@dequim.ist.utl.pt> <55e8a96c0510220651t47fa063ayefd1dcffd63950a6@mail.gmail.com> <435A6025.5060602@dequim.ist.utl.pt> <55e8a96c0510221659g7ac457b1gc696f392a249fee3@mail.gmail.com> In-Reply-To: <55e8a96c0510221659g7ac457b1gc696f392a249fee3@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-pf@freebsd.org Subject: Re: FreeBSD + MPD + PF + ALTQ X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Oct 2005 00:54:34 -0000 Bill Marquette wrote: >> Yes, I have now tried and verified that it works, but not as we would >> like to in the sense of a meta interface, eg: >> >> altq on { tun0 tun1 tun2 } cbq bandwidth 1Mb queue { a b } >> queue a bandwidth 700Kb cbq(default) >> queue b bandwidth 300Kb >> >> >> which turns itself into... (from pfctl -sq) >> >> >> queue root_tun0 bandwidth 1Mb priority 0 cbq( wrr root ) {a, b} >> queue a bandwidth 700Kb cbq( default ) >> queue b bandwidth 300Kb >> queue root_tun1 bandwidth 1Mb priority 0 cbq( wrr root ) {a, b} >> queue a bandwidth 700Kb cbq( default ) >> queue b bandwidth 300Kb >> queue root_tun2 bandwidth 1Mb priority 0 cbq( wrr root ) {a, b} >> queue a bandwidth 700Kb cbq( default ) >> queue b bandwidth 300Kb >> >> >> What would I want with this? To create a queue that is shared by every >> interface, so limiting globally every interface to a maximum of 1Mb each >> and all of them to 1Mb each too, in a cqb borrowing shared way. For >> examply, I'd like a to never exceed 700Kb taking into account every >> interface. This makes perfect sense if I have a limited ammount of bw to >> share among each client, which, in a real world, happens 99,9% of the >> time because resources are limited. >> >> So, the syntax works, but it does achieve what I mentioned before, the >> meta interface concept. The example you give is only useful for >> simplifying rulesets, although it's more difficult for humans to understand. > > > From what I understand, that binds queue 'a' to every interface. The > queue definition still limits the queue itself to 700Kb, but allows > you to assign traffic to that queue on each interface that queue is > bound to. I can't find the email that I read that suggests it now > (machine having recently been wiped and google not being terribly > forthcoming with the answer). > > Have you verified this not working with real traffic, or just the > pfctl -sq output? At this time I don't have a multi-interface box at > my disposal, so I can't easily test this. The machine I'm taking care of ( thousands of miles away) not always has traffic so it's difficult for me to test this :( Before answering you I googled for it too and couldn't find it. Since this isn't documented, I am really skeptic but hoping to be proven wrong :) best > > --Bill -- Bruno Afonso, Biological Engineer Dana-Farber Cancer Institute 1 Jimmy Fund Way Smith Building Boston, MA 02115 phone: (617)-632-5105 GABBA Graduate Student (http://gabba.up.pt) Homepage @ http://brunoafonso.net/