Date: Sat, 14 Feb 2004 15:19:28 +0200 From: "Markus Kovero" <markus.kovero@grafikansi.fi> To: <freebsd-questions@freebsd.org> Subject: ipfw bandwidth limit Message-ID: <200402141319.i1EDJOw22101@nalle.netsonic.fi>
next in thread | raw e-mail | index | archive | help
I've got 172.16.0.0/24 network that is connected to internet via vpn gre
tunnel.
And now I've had bit hard time doing bandwidth control, maybe I'm missing
something.
I've set ipfw pipes like this:
ipfw add queue 1 gre from any to 172.16.0.0/24
ipfw queue 1 config weight 5 pipe 2 mask dst-ip 0x000000ff
ipfw pipe 2 config bw 1500Kbit/s
ipfw add queue 2 gre from 172.16.0.0/24 to any
ipfw queue 2 config weight 20 pipe 3 mask src-ip 0x000000ff
ipfw pipe 3 config bw 256Kbit/s
net.inet.ip.fw.one_pass: 0
65100 queue 1 gre from any to 172.16.0.0/24
65200 queue 2 gre from 172.16.0.0/24 to any
00002: 1.500 Mbit/s 0 ms 50 sl. 0 queues (1 buckets) droptail
mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
00003: 256.000 Kbit/s 0 ms 50 sl. 0 queues (1 buckets) droptail
mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
q00001: weight 5 pipe 2 50 sl. 0 queues (64 buckets) droptail
mask: 0x00 0x00000000/0x0000 -> 0x000000ff/0x0000
q00002: weight 20 pipe 3 50 sl. 0 queues (64 buckets) droptail
mask: 0x00 0x000000ff/0x0000 -> 0x00000000/0x0000
It seems to have no effect on network. What I'm missing?
(replacing gre-protocol with ip doesn't help)
Markus Kovero
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402141319.i1EDJOw22101>