From owner-freebsd-pf@FreeBSD.ORG Thu Jun 24 23:01:38 2010 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AEBDD106564A; Thu, 24 Jun 2010 23:01:38 +0000 (UTC) (envelope-from rafaelhfaria@cenadigital.com.br) Received: from mail-vw0-f54.google.com (mail-vw0-f54.google.com [209.85.212.54]) by mx1.freebsd.org (Postfix) with ESMTP id 388208FC0A; Thu, 24 Jun 2010 23:01:37 +0000 (UTC) Received: by vws13 with SMTP id 13so3121321vws.13 for ; Thu, 24 Jun 2010 16:01:37 -0700 (PDT) Received: by 10.220.127.79 with SMTP id f15mr5419326vcs.271.1277420497267; Thu, 24 Jun 2010 16:01:37 -0700 (PDT) MIME-Version: 1.0 Received: by 10.220.87.85 with HTTP; Thu, 24 Jun 2010 16:01:17 -0700 (PDT) In-Reply-To: References: From: Rafael Henrique Faria Date: Thu, 24 Jun 2010 20:01:17 -0300 Message-ID: To: =?ISO-8859-1?Q?Ermal_Lu=E7i?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org, freebsd-pf@freebsd.org Subject: Re: Unknown Behavior of PF+ALTQ on a Bridge X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2010 23:01:38 -0000 On Thu, Jun 24, 2010 at 18:56, Ermal Lu=E7i wrote: > 2010/6/24 Rafael Henrique Faria : >> Just to be more clean: >> >> My pf.conf: >> ---- >> wan_if=3D"bce0" >> >> set limit { states 100000, frags 20000 } >> set loginterface $wan_if >> set optimization normal >> set block-policy drop >> set fingerprints "/etc/pf.os" >> set skip on lo >> >> altq on $wan_if cbq bandwidth 100% queue { out_bal, out_std } >> =A0 queue out_bal bandwidth 50% priority 0 cbq >> =A0 queue out_std bandwidth 50% priority 0 cbq (default borrow) >> >> pass out on $wan_if queue (out_bal) >> ---- >> > The problem is that this rule will not match any traffic that > initiated as incoming on $wan_if. > > Try this instead: > =A0pass out all queue (out_bal) > > It will do the magic. I tried it... but nothing changes... the same behavior. queue root_bce0 on bce0 bandwidth 1Gb priority 0 cbq( wrr root ) {out_bal, out_std} [ pkts: 76573 bytes: 14784373 dropped pkts: 0 bytes: 0= ] [ qlength: 0/ 50 borrows: 0 suspends: 0 ] [ measured: 2774.1 packets/s, 4.15Mb/s ] queue out_bal on bce0 bandwidth 500Mb priority 0 [ pkts: 27413 bytes: 8197630 dropped pkts: 0 bytes: 0= ] [ qlength: 0/ 50 borrows: 0 suspends: 0 ] [ measured: 1040.4 packets/s, 2.34Mb/s ] queue out_std on bce0 bandwidth 500Mb priority 0 cbq( borrow default ) [ pkts: 49160 bytes: 6586743 dropped pkts: 0 bytes: 0= ] [ qlength: 0/ 50 borrows: 0 suspends: 0 ] [ measured: 1733.7 packets/s, 1.81Mb/s ] I have tried a lot of rules... including: pass all queue out_bal But without success... If this is not the regular behavior of PF+ALTQ, my suspect is on the Bridge itself... >> >> The "pfctl -vvs queue" show: >> >> ---- >> queue root_bce0 on bce0 bandwidth 1Gb priority 0 cbq( wrr root ) >> {out_bal, out_std} >> =A0[ pkts: =A0 =A0 =A050117 =A0bytes: =A0 13947411 =A0dropped pkts: =A0 = =A0 =A00 bytes: =A0 =A0 =A00 ] >> =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 = =A00 ] >> =A0[ measured: =A03869.4 packets/s, 8.31Mb/s ] >> queue =A0out_bal on bce0 bandwidth 500Mb priority 0 >> =A0[ pkts: =A0 =A0 =A033198 =A0bytes: =A0 =A07175985 =A0dropped pkts: = =A0 =A0 =A00 bytes: =A0 =A0 =A00 ] >> =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 = =A00 ] >> =A0[ measured: =A02591.3 packets/s, 4.36Mb/s ] >> queue =A0out_std on bce0 bandwidth 500Mb priority 0 cbq( borrow default = ) >> =A0[ pkts: =A0 =A0 =A016919 =A0bytes: =A0 =A06771426 =A0dropped pkts: = =A0 =A0 =A00 bytes: =A0 =A0 =A00 ] >> =A0[ qlength: =A0 0/ 50 =A0borrows: =A0 =A0 =A00 =A0suspends: =A0 =A0 = =A00 ] >> =A0[ measured: =A01278.1 packets/s, 3.95Mb/s ] >> ---- >> >> So, my question is: why the default queue is being used, If I have a >> rule to use the out_bal queue to all outgoing traffic on that >> interface? >> >> I need to redirect all the traffic from a subnet (/24) to one queue >> (incoming and outgoing traffic)... so what I can understand is that, >> this is not possible with PF+ALTQ. Am I wrong? >> >> -- >> Rafael Henrique da Silva Faria >> Grupo de Sistemas e Redes >> >> Servi=E7o T=E9cnico de Inform=E1tica >> Faculdade de Ci=EAncias e Letras do Campus de Araraquara - UNESP >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >> > > > > -- > Ermal > --=20 Rafael Henrique da Silva Faria Grupo de Sistemas e Redes Servi=E7o T=E9cnico de Inform=E1tica Faculdade de Ci=EAncias e Letras do Campus de Araraquara - UNESP