From owner-freebsd-stable@freebsd.org Wed Dec 16 21:46:56 2015 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3EA91A48EC4 for ; Wed, 16 Dec 2015 21:46:56 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "smarthost.sentex.ca", Issuer "smarthost.sentex.ca" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1187214A1 for ; Wed, 16 Dec 2015 21:46:56 +0000 (UTC) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a] (saphire3.sentex.ca [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a]) by smarthost1.sentex.ca (8.15.2/8.15.2) with ESMTP id tBGLksNb018065; Wed, 16 Dec 2015 16:46:54 -0500 (EST) (envelope-from mike@sentex.net) Subject: Re: traffic shaping on RELENG_10 ? To: Karl Denninger , freebsd-stable@freebsd.org References: <5671C78A.4030807@sentex.net> <5671C816.8060004@denninger.net> <5671D153.4030501@sentex.net> <5671D73E.7060509@denninger.net> From: Mike Tancsa Organization: Sentex Communications Message-ID: <5671DBCB.1030709@sentex.net> Date: Wed, 16 Dec 2015 16:46:51 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <5671D73E.7060509@denninger.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.75 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2015 21:46:56 -0000 On 12/16/2015 4:27 PM, Karl Denninger wrote: >> Protect some boxes via pf, and then limit one box from eating up all the >> bandwidth when doing a backups and syncs. >> I would like to keep pf for firewall rules, and I would like to use >> ipfw+DUMMYNET for bandwidth shaping >> >> >> ---Mike >> > I use this... > ipfw pipe 1 config bw 3000Kbit/s > ipfw add 1700 pipe 1 tcp from {wherever} to any > > (and so on.... you can add any sort of flow into the pipe, and it will > honor that limit) > > Works very well. > Thanks, I have indeed used dummynet with great success. What I am trying to find out is can I still use pf for all the firewall rules, and then just use ipfw+dummynet for traffic shaping.... safely. ---Mike -- ------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/