From owner-freebsd-net@FreeBSD.ORG Fri Jul 29 09:51:47 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F1B5816A41F for ; Fri, 29 Jul 2005 09:51:47 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from postfix3-1.free.fr (postfix3-1.free.fr [213.228.0.44]) by mx1.FreeBSD.org (Postfix) with ESMTP id 90A0D43D45 for ; Fri, 29 Jul 2005 09:51:47 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from tatooine.tataz.chchile.org (vol75-8-82-233-239-98.fbx.proxad.net [82.233.239.98]) by postfix3-1.free.fr (Postfix) with ESMTP id E15C9173505; Fri, 29 Jul 2005 11:51:45 +0200 (CEST) Received: by tatooine.tataz.chchile.org (Postfix, from userid 1000) id 3B670405B; Fri, 29 Jul 2005 11:52:07 +0200 (CEST) Date: Fri, 29 Jul 2005 11:52:07 +0200 From: Jeremie Le Hen To: Julian Elischer Message-ID: <20050729095207.GL68965@obiwan.tataz.chchile.org> References: <200507290834.10268.doconnor@gsoft.com.au> <200507291035.46770.doconnor@gsoft.com.au> <42E98725.1020600@mac.com> <200507291115.06612.doconnor@gsoft.com.au> <42E99868.1080306@mac.com> <42E99CFD.6070803@elischer.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42E99CFD.6070803@elischer.org> User-Agent: Mutt/1.5.9i Cc: Daniel O'Connor , freebsd-net@freebsd.org Subject: Re: AltQ + ng_iface X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jul 2005 09:51:48 -0000 Hi Daniel, Chunk, Julian and all, > >slow things down. So you want to send dataless ACKs at a higher > >priority than generic big packets full of data, maybe via the "iplen" > >keyword with "established", look for packets smaller than ~100 bytes? > > [...] > > I sometimes actually prioitise ALL small packets allowing interactive > stuff to > bypass ftps etc. and sometimes I do it on both ends. I personnaly use the following rules on egress of my external interface to "prioritize" (although that's not Dummynet do) some packets. This works very well, I can make two parallel uploads at full upstream bandwidth without my SSH session or my download being impacted : ACKs: tcp from any to any iplen 40-60 tcpflags ack Interactive SSH: tcp from any to any 22 iptos lowdelay tcp from any 22 to any iptos lowdelay DNS requests: udp from any to any 53 Small PONG: icmp from any to any icmptype 8 iplen 1-200 HTTP(S), FTP: tcp from any to any 21,80,443 Regards, -- Jeremie Le Hen < jeremie at le-hen dot org >< ttz at chchile dot org >