Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Feb 2004 12:25:22 -0600
From:      Vulpes Velox <kitbsdlists@HotPOP.com>
To:        "Markus Kovero" <markus.kovero@grafikansi.fi>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ipfw bandwidth limit
Message-ID:  <20040214122522.7c1420ed@vixen42.>
In-Reply-To: <200402141319.i1EDJOw22101@nalle.netsonic.fi>
References:  <200402141319.i1EDJOw22101@nalle.netsonic.fi>

next in thread | previous in thread | raw e-mail | index | archive | help
here is a example from my ftp server...

ipfw add 200 pipe 2 tcp from me to any out gid ftpusersBWL
ipfw pipe config 2 bw 16KBps queue 100


this will pipe any thing from that gid into pipe 2... and pipe 2 is bw
limited at 16KBps... the only dif is that you will have to change the
packet matching setup...

On Sat, 14 Feb 2004 15:19:28 +0200
"Markus Kovero" <markus.kovero@grafikansi.fi> wrote:

> I've got 172.16.0.0/24 network that is connected to internet via vpn
> gre tunnel.
> And now I've had bit hard time doing bandwidth control, maybe I'm
> missing something.
> 
> I've set ipfw pipes like this:
> ipfw add queue 1 gre from any to 172.16.0.0/24
> ipfw queue 1 config weight 5 pipe 2 mask dst-ip 0x000000ff
> ipfw pipe 2 config bw 1500Kbit/s
> ipfw add queue 2 gre from 172.16.0.0/24 to any
> ipfw queue 2 config weight 20 pipe 3 mask src-ip 0x000000ff
> ipfw pipe 3 config bw 256Kbit/s
> 
> net.inet.ip.fw.one_pass: 0
> 
> 65100 queue 1 gre from any to 172.16.0.0/24
> 65200 queue 2 gre from 172.16.0.0/24 to any
> 
> 00002:   1.500 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> 00003: 256.000 Kbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> q00001: weight 5 pipe 2   50 sl. 0 queues (64 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x000000ff/0x0000
> q00002: weight 20 pipe 3   50 sl. 0 queues (64 buckets) droptail
>     mask: 0x00 0x000000ff/0x0000 -> 0x00000000/0x0000
> 
> It seems to have no effect on network. What I'm missing?
> (replacing gre-protocol with ip doesn't help)
> 
> Markus Kovero
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040214122522.7c1420ed>