Date: Sun, 22 Jul 2001 16:08:49 +0100 From: Chris Elsworth <chris@shagged.org> To: freebsd-stable@FreeBSD.ORG Subject: ipfw, pipes, and weighting Message-ID: <20010722160849.A67008@shagged.org>
next in thread | raw e-mail | index | archive | help
Ello all, I've just been playing with ipfw trying to get weighting to work. My end desire is this - make ssh lag-free regardless of what else is going on - ftp traffic being the worst offender. So I set out with this: ipfw add queue 1 ip from $LOCALNET to 195.11.55.73 ipfw add queue 2 ip from $LOCALNET to not 195.11.55.73 ipfw queue 1 config weight 100 pipe 1 mask src-ip 0xffffffff dst-ip 0xffffffff ipfw queue 2 config weight 1 pipe 1 mask src-ip 0xffffffff dst-ip 0xffffffff ipfw pipe 1 config bw 0 right at the top of my firewall sh script. I was hoping this would give top priority anything going to 195.11.55.73, and bottom priority to anything not going there. The output of ipfw pipe show looks correct - I can see a connection to 195.11.55.73 from my box (which happened to be ssh).. q00001: weight 100 pipe 1 50 sl. 1 queues (64 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 16 ip 195.11.8.226/0 195.11.55.73/0 90 5456 0 0 0 q00002: weight 1 pipe 1 50 sl. 41 queues (64 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 2 ip 195.11.8.253/0 63.197.148.248/0 10 910 0 0 0 4 ip 195.11.8.226/0 193.216.39.123/0 2 68 0 0 0 You can also see there were other connections accumulating in q00002 (there were many more) so that part appears to be working - the right connections are going to the right queues. What doesn't work is the weighting itself. I saw absolutely no difference whether I had those rules in or not. What am I missing? If you need any more info please shout. Thanks in anticipation. -- Chris Elsworth - Software & Systems Developer / Systems Administrator girls = time x money (and time is money) . chrise@demon.net = money^2 (money is root of all evil) . . tel: 020 8371 1041 = _/(evil^2) = evil t h u s mob: 07968 324 693 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010722160849.A67008>