From owner-freebsd-pf@FreeBSD.ORG Mon Nov 27 22:24:59 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EF1E516A47B for ; Mon, 27 Nov 2006 22:24:59 +0000 (UTC) (envelope-from tom@tomjudge.com) Received: from smtp-out4.blueyonder.co.uk (smtp-out4.blueyonder.co.uk [195.188.213.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7066543EBE for ; Mon, 27 Nov 2006 21:59:02 +0000 (GMT) (envelope-from tom@tomjudge.com) Received: from [172.23.170.142] (helo=anti-virus02-09) by smtp-out4.blueyonder.co.uk with smtp (Exim 4.52) id 1GooWB-0003A9-Bg; Mon, 27 Nov 2006 22:00:03 +0000 Received: from [82.43.34.109] (helo=[192.168.0.2]) by asmtp-out2.blueyonder.co.uk with esmtp (Exim 4.52) id 1GooW7-0007NX-P1; Mon, 27 Nov 2006 21:59:59 +0000 Message-ID: <456B619D.5000703@tomjudge.com> Date: Mon, 27 Nov 2006 22:07:25 +0000 From: Tom Judge User-Agent: Thunderbird 1.5.0.7 (X11/20060922) MIME-Version: 1.0 To: Gilberto Villani Brito References: <456B27C7.4030704@tomjudge.com> <6e6841490611271100t8f21e29ic4d4810f389c6fef@mail.gmail.com> In-Reply-To: <6e6841490611271100t8f21e29ic4d4810f389c6fef@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "FreeBSD \(PF\)" Subject: Re: PF and ALTQ queue option. X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Nov 2006 22:25:00 -0000 Gilberto Villani Brito wrote: > Correct, you need use your second example. > > Gilberto > Thanks, I have another query, if the last rule does not include a queue directive will the the traffic pass through altq or will it just pass thought the system bypassing the queue (see example rules below)? Thanks Tom pass in on em0 from any to any queue normal pass out on em0 from any to any queue normal pass in on em0 from 172.17.0.123 to 10.0.0.123 queue vidconf pass out on em0 from 10.0.0.123 to 172.17.0.123 queue vidconf pass in quick on em0 from 172.17.0.0/16 to 10.0.0.0/16 pass out quick on em0 from 10.0.0.0/16 to 172.17.0.0/16 > 2006/11/27, Tom Judge : >> Hi, >> >> I am looking at using cbq to prioritise video conference traffic over >> all of the rest of the traffic crossing our VPN. I was just wondering >> if the following configuration would to this (The vpn link is 2Mbit, in >> I will be running pf+altq at both ends of the link). >> >> >> >> altq on em0 cbq qbandwidth 2Mb queue { normal, vidconf } >> queue normal bandwidth 1Mb priority 0 cbq(ecn) >> queue vidconf bandwidth 1Mb priority 1 cbq(ecn) >> >> pass in on em0 from 172.17.0.123 to 10.0.0.123 queue vidconf >> pass out on em0 from 10.0.0.123 to 172.17.0.123 queue vidconf >> >> pass in on em0 from any to any queue normal >> pass out on em0 from any to any queue normal >> >> pass in quick on em0 from 172.17.0.0/16 to 10.0.0.0/16 >> pass out quick on em0 from 10.0.0.0/16 to 172.17.0.0/16 >> >> >> The main question I have is which queue will the traffic between >> 10.0.0.123 and 172.17.0.123. In the pf world it would seem it gets >> queued in normal, is this correct? if it is i guess i have to invert the >> rules like so: >> >> pass in on em0 from any to any queue normal >> pass out on em0 from any to any queue normal >> >> pass in on em0 from 172.17.0.123 to 10.0.0.123 queue vidconf >> pass out on em0 from 10.0.0.123 to 172.17.0.123 queue vidconf >> >>