From owner-freebsd-net@FreeBSD.ORG Thu Jun 24 21:56:44 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6E2BC1065672; Thu, 24 Jun 2010 21:56:44 +0000 (UTC) (envelope-from ermal.luci@gmail.com) Received: from mail-ww0-f54.google.com (mail-ww0-f54.google.com [74.125.82.54]) by mx1.freebsd.org (Postfix) with ESMTP id CB22E8FC27; Thu, 24 Jun 2010 21:56:43 +0000 (UTC) Received: by wwb24 with SMTP id 24so2186449wwb.13 for ; Thu, 24 Jun 2010 14:56:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:sender:received :in-reply-to:references:from:date:x-google-sender-auth:message-id :subject:to:cc:content-type:content-transfer-encoding; bh=wD1oRSZfP1a5y7IaM9wR/7WCxuEBtU2HdNn21x1vmYg=; b=tCj7GlODijDxEbllFU0GZfic5Ny884w98wp7Q5q5Tq4NwFp2Q2/+slNtTiV1FJIetH ImyPJ5rd41E02BhTkS9IiorS04l+tV0z/Hjb9V6moIdv4g08b8IVcdrDx8R6PajVrYlx 0eipnpV+LtRo12XqhX3sw71+vhTXYE7HfJknk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=xSWGe6WJFjUcuL+YmwBaEaLg2xg3qLr6NiM9Qf4ztS34yl4/kJmqzixaUQoytEX3ol v0uTYF1QaM+b+H7duCMYg5Po2zA6JlSxkvKiBK2Oa7dkjaLGhSrgNPQXOnaSjqEDntWR s5enggk0AKRsvisiczRviv4lq2FA4pEfljBmU= Received: by 10.216.85.17 with SMTP id t17mr7919192wee.30.1277416602262; Thu, 24 Jun 2010 14:56:42 -0700 (PDT) MIME-Version: 1.0 Sender: ermal.luci@gmail.com Received: by 10.216.25.4 with HTTP; Thu, 24 Jun 2010 14:56:22 -0700 (PDT) In-Reply-To: References: From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= Date: Thu, 24 Jun 2010 23:56:22 +0200 X-Google-Sender-Auth: nqNfi4jPfnO-9VH1x9VpbNs8Fcc Message-ID: To: Rafael Henrique Faria Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org, =?ISO-8859-1?Q?M=E1rcio_Luciano_Donada?= , freebsd-pf@freebsd.org Subject: Re: Unknown Behavior of PF+ALTQ on a Bridge X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2010 21:56:44 -0000 2010/6/24 Rafael Henrique Faria : > Just to be more clean: > > My pf.conf: > ---- > wan_if=3D"bce0" > > set limit { states 100000, frags 20000 } > set loginterface $wan_if > set optimization normal > set block-policy drop > set fingerprints "/etc/pf.os" > set skip on lo > > altq on $wan_if cbq bandwidth 100% queue { out_bal, out_std } > =A0 queue out_bal bandwidth 50% priority 0 cbq > =A0 queue out_std bandwidth 50% priority 0 cbq (default borrow) > > pass out on $wan_if queue (out_bal) > ---- > The problem is that this rule will not match any traffic that initiated as incoming on $wan_if. Try this instead: pass out all queue (out_bal) It will do the magic. > > The "pfctl -vvs queue" show: > > ---- > queue root_bce0 on bce0 bandwidth 1Gb priority 0 cbq( wrr root ) > {out_bal, out_std} > =A0[ pkts: =A0 =A0 =A050117 =A0bytes: =A0 13947411 =A0dropped pkts: =A0 = =A0 =A00 bytes: =A0 =A0 =A00 ] > =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 =A0= 0 ] > =A0[ measured: =A03869.4 packets/s, 8.31Mb/s ] > queue =A0out_bal on bce0 bandwidth 500Mb priority 0 > =A0[ pkts: =A0 =A0 =A033198 =A0bytes: =A0 =A07175985 =A0dropped pkts: =A0= =A0 =A00 bytes: =A0 =A0 =A00 ] > =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 =A0= 0 ] > =A0[ measured: =A02591.3 packets/s, 4.36Mb/s ] > queue =A0out_std on bce0 bandwidth 500Mb priority 0 cbq( borrow default ) > =A0[ pkts: =A0 =A0 =A016919 =A0bytes: =A0 =A06771426 =A0dropped pkts: =A0= =A0 =A00 bytes: =A0 =A0 =A00 ] > =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 =A0= 0 ] > =A0[ measured: =A01278.1 packets/s, 3.95Mb/s ] > ---- > > So, my question is: why the default queue is being used, If I have a > rule to use the out_bal queue to all outgoing traffic on that > interface? > > I need to redirect all the traffic from a subnet (/24) to one queue > (incoming and outgoing traffic)... so what I can understand is that, > this is not possible with PF+ALTQ. Am I wrong? > > -- > Rafael Henrique da Silva Faria > Grupo de Sistemas e Redes > > Servi=E7o T=E9cnico de Inform=E1tica > Faculdade de Ci=EAncias e Letras do Campus de Araraquara - UNESP > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 Ermal