From owner-freebsd-net@FreeBSD.ORG Thu Dec 7 12:52:42 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3A33C16A4AB for ; Thu, 7 Dec 2006 12:52:42 +0000 (UTC) (envelope-from hidden@4you.lt) Received: from tequila.4you.lt (tequila.4you.lt [212.122.65.91]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5FED643FEC for ; Thu, 7 Dec 2006 12:47:14 +0000 (GMT) (envelope-from hidden@4you.lt) Received: (qmail 78007 invoked by uid 98); 7 Dec 2006 12:48:00 -0000 Received: from 84.240.25.195 by tequila.4you.lt (envelope-from , uid 89) with qmail-scanner-1.25 (f-prot: 4.6.6/3.16.14. spamassassin: 3.1.7. Clear:RC:0(84.240.25.195):SA:0(-2.3/5.0):. Processed in 5.587352 secs); 07 Dec 2006 12:48:00 -0000 X-Spam-Status: No, hits=-2.3 required=5.0 X-Qmail-Scanner-Mail-From: hidden@4you.lt via tequila.4you.lt X-Qmail-Scanner: 1.25 (Clear:RC:0(84.240.25.195):SA:0(-2.3/5.0):. Processed in 5.587352 secs) Received: from unknown (HELO BLUEBIRD) (hidden@4you.lt@84.240.25.195) by tequila.4you.lt with SMTP; 7 Dec 2006 12:47:54 -0000 Date: Thu, 7 Dec 2006 14:47:51 +0200 From: Timofej Dod X-Mailer: The Bat! (v3.51.10) Professional X-Priority: 3 (Normal) Message-ID: <1797123194.20061207144751@4you.lt> To: =?iso-8859-1?Q?H=E5kon_Granlund?= In-Reply-To: <45780C9C.1000907@sircon.no> References: <1895992105.20061206224504@4you.lt> <45780C9C.1000907@sircon.no> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Cc: freebsd-net@freebsd.org Subject: Re[2]: dummynet throughput problem X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Timofej Dod List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Dec 2006 12:52:42 -0000 Sveiki, Yep, it was a problem at the upstream which was seeing the packets twice and adding them into the pipe twice because of that. There were no skipto rules at the upstream. ------------------- HG> Timofej Dod wrote: >> Hi, >> >> I got a firewall with ipfw + dummynet. >> system is: >> FreeBSD 6.1-RELEASE-p10 >> >> table 1 contains 211 IP addresses. >> >> 00502 pipe 11 ip from any to table(1) out via rl0 >> 00502 skipto 2000 ip from any to table(1) >> >> and with pipe configured >> ipfw -q pipe 11 config mask dst-ip 0xffffffff bw 256Kbit/s >> >> however everybody only getting half of it i.e. 128 Kbits. >> also net.inet.ip.fw.one_pass: 1 doesn't seem to work properly since >> counters show that skipto rule is being triggered and it should not with >> the one_pass activated. >> Any clues how to make it give the speed it is supposed to? HG> I'm absolutely no expert on this matter, but I think you have to define HG> where the packets are going. It's got something to do with DUMMYNET or HG> IPFW seeing the packet twice. You're probably looking for: HG> 00502 pipe 11 ip from any to table(1) out xmit rl0 HG> A similar rule for incoming would be: HG> pipe 12 ip from table(1) to any in recv rl0 HG> -- HG> Håkon Granlund -- Timofej Dod Interneto programuotojas / Web Developer UAB "Eilorita" , 4you.ltT Tel./Faks:+370 52 349 379 Mob. +375 29 7783581 ICQ 136621403 http://www.4you.lt