Date: Sun, 7 Sep 2003 01:20:32 -0700 From: Luigi Rizzo <rizzo@icir.org> To: Ivo Vachkov <ivo@bsdmail.org> Cc: freebsd-ipfw@freebsd.org Subject: Re: Burst Message-ID: <20030907012032.B77367@xorpc.icir.org> In-Reply-To: <20030906200659.10411.qmail@bsdmail.com>; from ivo@bsdmail.org on Sat, Sep 06, 2003 at 10:06:58PM %2B0200 References: <20030906200659.10411.qmail@bsdmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
the problem with your approach is that the user can easily overcome the limitation by splitting the connection into many small ones, each one below the allowed burst size. If you implement burst properly (which you may have done already), the max amount of traffic that gets out in T seconds is T * bandwidth + burst_size so you really have an advantage only if your traffic has a required throughput lower than the allowed bandwidth (that basically leaves out web browsing), and it has large burts (so the additional delay on each transmission, block_size/bandwidth, becomes noticeable). cheers luigi > Obviously I've understood terms wrong. > > When I said "burst" I was thinking of limitting the speed of active connection when some conditions apply. > > Example: ISP has 10Mbps connection to internet and every user/client has 1Mbps pipe to Internet. So every user has fast browsing, mail, news, ICQ/AIM/etc. But when a user tries to download a big file (.ISO/.AVI/.MPG) the connection, even active, is limitted to 64kbps whithout limitting other connections. So his download keeps running at low speed, while browsing/mail/etc is still fast. The software applies limits when some numbers of bytes passed throught the connection. > > NB!!! Other connections are NOT shaped until they reach the predefined condition. They became shaped only after that. > > My "workaround" is as follows: > ipfw add divert 8670 ip from any to $CLIENT_IP > + a daemon called *burstd* which binds to diverted port 8670, conunts the bytes for every connection to that IP and apply the limits when predefinied byte count is exceeded. It's far away from perfect, although quite accurate, so I was asking for another way to implement a solution to this situation. > > Ivo Vachkov > -- > _______________________________________________ > Get your free email from http://mymail.bsdmail.com > > Powered by Outblaze > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030907012032.B77367>