From owner-freebsd-net@FreeBSD.ORG Mon Apr 30 11:37:17 2007 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EC70916A401; Mon, 30 Apr 2007 11:37:17 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from turion.vk2pj.dyndns.org (c220-239-3-125.belrs4.nsw.optusnet.com.au [220.239.3.125]) by mx1.freebsd.org (Postfix) with ESMTP id 5FAC313C45E; Mon, 30 Apr 2007 11:37:17 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from turion.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1]) by turion.vk2pj.dyndns.org (8.14.1/8.14.1) with ESMTP id l3UBbFDh001752; Mon, 30 Apr 2007 21:37:15 +1000 (EST) (envelope-from peter@turion.vk2pj.dyndns.org) Received: (from peter@localhost) by turion.vk2pj.dyndns.org (8.14.1/8.14.1/Submit) id l3UBbFGl001751; Mon, 30 Apr 2007 21:37:15 +1000 (EST) (envelope-from peter) Date: Mon, 30 Apr 2007 21:37:15 +1000 From: Peter Jeremy To: Robert Watson Message-ID: <20070430113715.GD838@turion.vk2pj.dyndns.org> References: <20070429112838.GH848@turion.vk2pj.dyndns.org> <20070430105659.C37507@fledge.watson.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="VbJkn9YxBvnuCH5J" Content-Disposition: inline In-Reply-To: <20070430105659.C37507@fledge.watson.org> X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc User-Agent: Mutt/1.5.14 (2007-02-12) Cc: Jack Barnett , freebsd-net@freebsd.org Subject: Re: Firewall X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Apr 2007 11:37:18 -0000 --VbJkn9YxBvnuCH5J Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2007-Apr-30 10:58:18 +0100, Robert Watson wrote: >One of the big selling points of IPFW is integration with DUMMYNET, which= =20 >offers bandwidth management facilities not present in the other systems. I thought altq(4) could also do most of what dummynet(4) does but based on a closer look, it seems that it can't do the packet delay stuff, though it seems to have fairly similar bandwidth management facilities. >is the main selling point for ipfw on my servers -- being able to rate=20 >limit arbitrary IP addresses, port numbers, etc, both in terms of inbound= =20 >and outbound traffic is invaluable. I extensively use dummynet at work to simulate WANs (bandwidth limited and significant delays) between different servers in our models. It has proved invaluable for relicating field problems. --=20 Peter Jeremy --VbJkn9YxBvnuCH5J Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFGNdTr/opHv/APuIcRAklGAJ943tw20evFrgxDlhb4xgYhTueH1ACfXaaH wvO0+1f/pxAZHaQpQXYVRnM= =9Vk8 -----END PGP SIGNATURE----- --VbJkn9YxBvnuCH5J--