Date: Mon, 11 Apr 2011 11:06:48 +0300 From: Zeus V Panchenko <zeus@ibs.dn.ua> To: freebsd-pf@freebsd.org Subject: Re: transparent proxy traffic queue ... Message-ID: <20110411080648.GD22812@relay.ibs.dn.ua> In-Reply-To: <20110411061730.GA26940@insomnia.benzedrine.cx> References: <20110210155622.GA60117@icarus.home.lan> <20110411054544.GC22812@relay.ibs.dn.ua> <20110411061730.GA26940@insomnia.benzedrine.cx>
next in thread | previous in thread | raw e-mail | index | archive | help
Thank you Daniel for reply,
Daniel Hartmeier (daniel@benzedrine.cx) [11.04.11 09:18] wrote:
> On Mon, Apr 11, 2011 at 08:45:44AM +0300, Zeus V Panchenko wrote:
> It seems you want log(all), but are only using log, see pf.conf(5):
it didn't help ...
pftop output still shows no lan_http counters and when i download from
inet anything it eats all bandwidth ...
in pf.conf
pass out log (all) on $if_wan inet proto { tcp, udp } from $if_wan:0 \
to any port { $ports_proxy } keep state queue wan_http
pass out log (all) on $if_lan inet proto { tcp, udp } from any port { $ports_proxy } \
to $if_lan:network queue lan_http
squid is bent to $if_lan:0 and in logs i see the activity (LAN browses inet successfully)
if i tcpdump $if_lan i can see that, but it looks like it is passing by the queue ... why?
in pftop output:
pfTop: Up Queue 1-6/6, View: queue, Cache: 10000 10:59:55
QUEUE BW SCH PRIO PKTS BYTES DROP_P DROP_B QLEN BORROW SUSPEN P/S B/S
root_tun0 1000K cbq 0 12270 1429980 0 0 0 0 0 23 1867
wan_http 150K cbq 2 4180 512946 0 0 0 0 29 0 0
wan_rest 850K cbq 8090 917034 0 0 0 0 0 23 1867
root_ale0 100M cbq 0 11789 9982786 0 0 0 0 0 16 21739
lan_http 2000K cbq 2 0 0 0 0 0 0 0 0 0
lan_rest 98M cbq 13469 11810110 0 0 0 0 1073 38 43015
--
Zeus V. Panchenko
IT Dpt., IBS ltd GMT+2 (EET)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110411080648.GD22812>