From owner-freebsd-net Tue May 1 23: 5:49 2001 Delivered-To: freebsd-net@freebsd.org Received: from filk.iinet.net.au (syncopation-dns.iinet.net.au [203.59.24.29]) by hub.freebsd.org (Postfix) with SMTP id 8BEA637B422 for ; Tue, 1 May 2001 23:05:44 -0700 (PDT) (envelope-from julian@elischer.org) Received: (qmail 30906 invoked by uid 666); 2 May 2001 06:09:07 -0000 Received: from i180-086.nv.iinet.net.au (HELO elischer.org) (203.59.180.86) by mail.m.iinet.net.au with SMTP; 2 May 2001 06:09:07 -0000 Message-ID: <3AEFA370.28562F63@elischer.org> Date: Tue, 01 May 2001 23:04:32 -0700 From: Julian Elischer X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 5.0-CURRENT i386) X-Accept-Language: en, hu MIME-Version: 1.0 To: =?iso-8859-1?Q?R=E9mi?= Guyomarch Cc: Gunther Schadow , snap-users@kame.net, freebsd-net@freebsd.org, ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp Subject: Re: The future of ALTQ, IPsec & IPFILTER playing together ... References: <3AEEEE79.8F7CC7B0@aurora.regenstrief.org> <3AEEF26B.C6850070@isi.edu> <3AEEF59D.3D5622DE@aurora.regenstrief.org> <20010501205741.A30269@diabolic-cow.chatgris.net> <3AEF0E6A.2E9B34A0@aurora.regenstrief.org> <20010501235602.B30269@diabolic-cow.chatgris.net> Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Rémi Guyomarch wrote: > > On Tue, May 01, 2001 at 07:28:42PM +0000, Gunther Schadow wrote: > > Rémi Guyomarch wrote: > > > > > IIRC you can put a bandwidth limiter on a virtual interface (this is > > > even the only solution to use ALTQ on tun or ppp devices) and thus > > > provide a queue which can be managed by ALTQ. > > > > Aha! A Light! How is that done? Can you give more specifics? > > Look at docs/TIPS.txt in the altq-3.0 release, point 1.9 : > > ... > 1.9 Tun Driver > Although altq-3.0 supports the tun driver, it is a bit tricky to > control the tun device. > > When ppp transmits packets the tun interface is not a bottleneck > but the serial port is the bottleneck. As a result, packets are > queued in the output queue of ppp and the buffer in the kernel > as shown in the following figure. (a queued packet is shown as X.) > > ppp > app ---+ +-->[ XXX]--+ > | | | > user | | | > ==========|==============|===========|===== > kernel | | | > | +------+ | | > +-->| |---+ +->[ XX]--> sio > +------+ line > tun0 discipline > > To control traffic at the tun interface, rate-limit the tun > interface by a token-bucket regulator to shift the queueing point > to the tun device as shown in the following figure. > > ppp > app ---+ +-->[ ]--+ > | | | > user | | | > ==========|==============|===========|===== > kernel | | | > | +------+ | | > +-->| XXXXX|---+ +->[ ]--> sio > +------+^tbr line > tun0 discipline > > Note that ppp usually compress packets so that the throughput at > the tun interface will be much higher than the line rate. the above picture is only true for ppp if you use mpd it is as follows: > > app ---+ > | > user | > ==========|================================ > kernel | > | +------+ ppp > +-->| |---+-->[ ]--+->[ ]--> sio > +------+^tbr line > ng0 discipline > > ... > -- __--_|\ Julian Elischer / \ julian@elischer.org ( OZ ) World tour 2000-2001 ---> X_.---._/ v To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message