From owner-freebsd-pf@FreeBSD.ORG Fri Aug 1 10:07:20 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 125171065693 for ; Fri, 1 Aug 2008 10:07:20 +0000 (UTC) (envelope-from news@topocentras.lt) Received: from mx.agservice.lt (mx.agservice.lt [88.119.128.106]) by mx1.freebsd.org (Postfix) with ESMTP id 884C18FC38 for ; Fri, 1 Aug 2008 10:07:19 +0000 (UTC) (envelope-from news@topocentras.lt) Received: from localhost (localhost [127.0.0.1]) by mx.agservice.lt (Postfix) with ESMTP id C52507316C for ; Fri, 1 Aug 2008 13:07:17 +0300 (EEST) X-Virus-Scanned: amavisd-new at agtrade.lt Received: from mx.agservice.lt ([127.0.0.1]) by localhost (mail.agtrade.lt [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gn1FI533UlTU for ; Fri, 1 Aug 2008 13:07:15 +0300 (EEST) Received: from mx.agservice.lt (localhost [127.0.0.1]) (Authenticated sender: news@topocentras.lt) by mx.agservice.lt (Postfix) with ESMTPA id 1F19373038 for ; Fri, 1 Aug 2008 13:07:15 +0300 (EEST) Received: from 88.119.128.115 (SquirrelMail authenticated user news@topocentras.lt) by mx.agservice.lt with HTTP; Fri, 1 Aug 2008 13:07:15 +0300 (EEST) Message-ID: <56637.88.119.128.115.1217585235.squirrel@mx.agservice.lt> In-Reply-To: <50928.88.119.128.115.1217406553.squirrel@mx.agservice.lt> References: <51307.88.119.128.115.1217227945.squirrel@mx.agservice.lt> <64686.88.119.128.115.1217400195.squirrel@mx.agservice.lt> <1217406136.31805.6.camel@buchtajz> <50928.88.119.128.115.1217406553.squirrel@mx.agservice.lt> Date: Fri, 1 Aug 2008 13:07:15 +0300 (EEST) From: news@topocentras.lt To: freebsd-pf@freebsd.org User-Agent: SquirrelMail/1.4.10a MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Subject: Re: need help with keep state and shaping X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Aug 2008 10:07:20 -0000 Hello once more, What difference in state-policy floating and if-bound? If i am using tagging for incoming and outgoing traffic? Which policy I need to use? Thanks, Albertas > Thanks for suggestion. Is any difference using set state-policy if-bound? > When what state policy to use? > > Thanks, Albertas > > >> PF makes 2 states per connection, so try this >> ($int_if is users LAN) >> >> pass in quick on $int_if from 10.0.0.1 to any tag user1 queue download1 >> pass in quick on $ext_if from any to 10.0.0.1 tag user1 queue upload1 >> pass out quick on $int_if tagged user1 queue download1 >> pass out quick on $ext_if tagged user1 queue upload1 >> .....and so on for another users >> >> >> news@topocentras.lt píše v St 30. 07. 2008 v 09:43 +0300: >>> Hello once more, >>> It whould be very interesting to hear from you how to use keep state >>> for >>> router, shaping in and out traffic. >>> I am using around thousand of queues(hfsc) and it makes a lot of >>> performace problems. Using keep state it would reduce it, but as i >>> mention >>> before, i have problems using it. >>> >>> Sincerely Yours, >>> Albertas >>> >>> > ext_if="bge0" >>> > int_if="bge1" >>> > >>> > pass out quick on $ext_if from 10.0.0.1 to any queue upload1 >>> > pass out quick on $int_if from any to 10.0.0.1 queue download1 >>> > >>> > pass out quick on $ext_if from 10.0.0.2 to any queue upload2 >>> > pass out quick on $int_if from any to 10.0.0.2 queue download2 >>> > >>> > pass out quick on $ext_if from 10.0.0.3 to any queue upload3 >>> > pass out quick on $int_if from any to 10.0.0.3 queue download3 >>> > >>> > pass in all >>> > pass out all >>> > >>> > #10.0.0.x users subnet >>> > >>> > Hello, >>> > I have problems with keep state usage. I need to shape ingoing and >>> > outgoing trafic (no nat). >>> > Before I used sintax like above, but then I used it with keyword >>> "keep >>> > state" some useres reported problems with trafic. >>> > With version FreeBSD 7 with keep state on pass rules are not working >>> at >>> > all. >>> > Question is how to deal with keep state for in and out trafic then i >>> need >>> > to shape both? I tried to use set state-policy if-bound but it had no >>> > impact. >>> > >>> > _______________________________________________ >>> > freebsd-pf@freebsd.org mailing list >>> > http://lists.freebsd.org/mailman/listinfo/freebsd-pf >>> > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >>> > >>> >>> >>> _______________________________________________ >>> freebsd-pf@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-pf >>> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >> >> > > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >