From owner-freebsd-security  Thu Sep 27  8:43:44 2001
Delivered-To: freebsd-security@freebsd.org
Received: from web20701.mail.yahoo.com (web20701.mail.yahoo.com [216.136.226.174])
	by hub.freebsd.org (Postfix) with SMTP id 08D3737B40B
	for <freebsd-security@FreeBSD.ORG>; Thu, 27 Sep 2001 08:43:41 -0700 (PDT)
Message-ID: <20010927154336.79433.qmail@web20701.mail.yahoo.com>
Received: from [62.128.212.126] by web20701.mail.yahoo.com via HTTP; Thu, 27 Sep 2001 16:43:36 BST
Date: Thu, 27 Sep 2001 16:43:36 +0100 (BST)
From: =?iso-8859-1?q?Adam=20Nealis?= <adamnealis@yahoo.co.uk>
Subject: Re: Using ipfw pipes for bandwidth management - can it allow for "bursting"?
To: Krzysztof Stryjek <wtp@agsmedia.pl>
Cc: freebsd-security@FreeBSD.ORG
In-Reply-To: <Pine.LNX.4.33.0109262244070.30078-100000@pooh.panska.agsmedia.pl>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hi Krzysztof,

 --- Krzysztof Stryjek <wtp@agsmedia.pl> wrote: 
> On Wed, 26 Sep 2001, [iso-8859-1] Adam Nealis wrote:
> > and as a FreeBSD fan I'd like to use something that was
> > part of the core OS.
> >
> As it was said, you shod man dummynet, but I'm using bandwidth for
> outgoing ftp (firewall script):
> 
> # Add pipe for FTP transfers (-> world)
> ${fwcmd} add pipe 21 tcp from ${ip} to any out
> ${fwcmd} pipe 21 config mask src-port 21 proto ftp bw 24Kbit/s delay 5ms
> 
> # Allow TCP through if setup succeeded
> ${fwcmd} add pass tcp from any to any established
> 
> where ${ip} is my IP number. As you can see, it *should* be before next
> rule of accepting established connections.
I understand this use of ipfw as a method of bandwidth
control, however my question concerned the use of the
red|gred parameters to allow connections to have
available more than their nominal aggregate bandwidth
for short time spans. Which is what I meant by "bursting".

Cheers,
Adam.

____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message