Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Oct 2005 22:46:43 +0200
From:      Max Laier <max@love2party.net>
To:        freebsd-net@freebsd.org
Cc:        Arne =?utf-8?q?W=F6rner?= <arne_woerner@yahoo.com>
Subject:   Re: pf / queue+stateful / r generated rules assigned to the right queue?
Message-ID:  <200510032246.57786.max@love2party.net>
In-Reply-To: <20051003191704.39154.qmail@web30308.mail.mud.yahoo.com>
References:  <20051003191704.39154.qmail@web30308.mail.mud.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Arne,

On Monday 03 October 2005 21:17, Arne Wörner wrote:
> Since my server cannot process gracefully a 20Mb/s stream on one
> NIC, while ntpd (or ping) runs on the other NIC (round trip times
> increase from about 60msec to 300msec), I tried to limit the
> sporadic big data stream to not more than 9Mb/s.

it is impossible to limit incoming traffic!  In order to limit this, you need 
to queue on a gateway "in front" of the server.

> When I look at "pfctl -s queue -vv" it looks like, just one way is
> mentioned in the statistic, while the generated corresponding rule
> (I use "keep state") isn't a member of any queue, which would be a
> bug...

I have problems to understand what you are saying here.  Keep some things in 
mind:
 1) One can only queue *OUT*going traffic
 2) All unclassified outgoing traffic ends up in the default queue
 3) Don't forget about 1)

I might, however, completely misunderstand you problem/question.  In any case 
you could try to take this to freebsd-pf@ which is a more specialized 
mailinglist.  The people there can certainly help you with your setup.

-- 
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQBDQZjBXyyEoT62BG0RAsiSAJ46W2m15+BXhFwsm5ptNlNnsG+oxACeNzYF
BehDWg7lt4S+An1Z8wn5M6Q=
=aYt1
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200510032246.57786.max>