From owner-freebsd-ipfw@freebsd.org Sat Jul 18 19:40:22 2015 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0B3669A57C4 for ; Sat, 18 Jul 2015 19:40:22 +0000 (UTC) (envelope-from hiren@strugglingcoder.info) Received: from mail.strugglingcoder.info (strugglingcoder.info [65.19.130.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F08C41A99 for ; Sat, 18 Jul 2015 19:40:21 +0000 (UTC) (envelope-from hiren@strugglingcoder.info) Received: from localhost (unknown [10.1.1.3]) (Authenticated sender: hiren@strugglingcoder.info) by mail.strugglingcoder.info (Postfix) with ESMTPSA id 1A331D3E50 for ; Sat, 18 Jul 2015 12:40:21 -0700 (PDT) Date: Sat, 18 Jul 2015 12:40:21 -0700 From: hiren panchasara To: freebsd-ipfw@freebsd.org Subject: Traffic not going through dummynet Message-ID: <20150718194020.GQ38517@strugglingcoder.info> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ZgGN478A9hzzvyZc" Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jul 2015 19:40:22 -0000 --ZgGN478A9hzzvyZc Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable This is driving me nuts. I've had an ipfw/dummynet working config on separate setup and the same thing doesn't work on this new setup I have so I tried to narrow it down and removed all complexity and trying to see if this works on just single host. But it doesn't work as I expect it to. I am pretty sure I am missing something here. 11.0-CURRENT FreeBSD 11.0-CURRENT #1 r283696M: Fri Jul 17 15:43:05 MST 2015 loader.conf has: net.inet.ip.fw.default_to_accept=3D"1" dummynet_load=3D"YES" I did: # ipfw add pipe 1 ip from any to any # ipfw pipe 1 config delay 100ms # ipfw show 00100 0 0 pipe 1 ip from any to any 65535 4321 509541 allow ip from any to any # ipfw pipe show 00001: unlimited 100 ms burst 0=20 q131073 50 sl. 0 flows (1 buckets) sched 65537 weight 0 lmax 0 pri 0 droptail sched 65537 type FIFO flags 0x0 0 buckets 0 active Now if I ping anything, I don't see 100ms delay. # sysctl -a | grep ipfw kern.features.ipfw_ctl3: 1 net.link.ether.ipfw: 0 net.inet.ip.dummynet.io_pkt_fast: 0 net.inet.ip.dummynet.io_fast: 0 net.link.ether.ipfw: 0 What should I be looking at next? Cheers, Hiren (Please keep me cc'd) --ZgGN478A9hzzvyZc Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQF8BAEBCgBmBQJVqqukXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBNEUyMEZBMUQ4Nzg4RjNGMTdFNjZGMDI4 QjkyNTBFMTU2M0VERkU1AAoJEIuSUOFWPt/lSDQH/2GmimJnkGzuWF3GTRAylArY tKegsB1djWSTc1+ofElpgwvcscdpdEOihQnOCYH2WRAcTDxSwyFYeqriwqGvNvNU BT6eZYE9texiqHBYTNuiHIeov9BATx/nPqn74cMK48C5uwKfPADXjJKNgNY2MA57 5KLq04xW63eDPxagb/bzlsQqc1LOrCs1km9Vpa8mL7LOWUTlXmLwMB7AQPh6LxGn Gks0Zue3e2FAhAkjj9QJeoAMcKqbCAJQbabnJIQEs9pUgCqEi4DV1+mAFYH4/8d6 NhJRy5T26hd1dVcP9o0cvrRUxmHv2j79IhRuJ0A8t9FDuTcLcvrQcLgoL0fcsG8= =cX9k -----END PGP SIGNATURE----- --ZgGN478A9hzzvyZc--