Shorewall users - Jun 2008 - Shorewall-3.2.9 - Burst 4096Mb in Traffic Control !!!

Hello,

All changes I make in shorewall config files are correctly applied except the
burst parameter when the rate is below 256kbit.
The 30kb burst in config file becomes 4096Mb !!! 

In my config file :
run_tc class add dev $DEVdc parent 2:1 classid 2:85 htb rate 1kbit ceil 1mbit
burst 30kb prio 5

shorewall show tc :
class htb 2:85 parent 2:1 prio 5 quantum 1000 rate 1000bit ceil 1000Kbit burst
4096Mb/8 mpu 0b overhead 0b cburst 2100b/8 mpu 0b overhead 0b level 0
 Sent 380235095 bytes 1052587 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 500616bit 113pps backlog 0b 93p requeues 0 
 lended: 89803 borrowed: 962691 giants: 418
 tokens: -1761054 ctokens: -17009

Thanks for your help,
JP.


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

Jean-Philippe RAMES wrote:
> Hello,
> 
> All changes I make in shorewall config files are correctly applied except
the burst parameter when the rate is below 256kbit.
> The 30kb burst in config file becomes 4096Mb !!! 
> 
> In my config file :
> run_tc class add dev $DEVdc parent 2:1 classid 2:85 htb rate 1kbit ceil
1mbit burst 30kb prio 5
If you are putting that command in a Shorewall configuration file, it must 
be an extension script.
> 
> shorewall show tc :
> class htb 2:85 parent 2:1 prio 5 quantum 1000 rate 1000bit ceil 1000Kbit
burst 4096Mb/8 mpu 0b overhead 0b cburst 2100b/8 mpu 0b overhead 0b level 0
>  Sent 380235095 bytes 1052587 pkt (dropped 0, overlimits 0 requeues 0) 
>  rate 500616bit 113pps backlog 0b 93p requeues 0 
>  lended: 89803 borrowed: 962691 giants: 418
>  tokens: -1761054 ctokens: -17009
It which case, your problem report has nothing to do with Shorewall. All 
''run_tc'' does is:

run_tc() {
     if ! tc $@ ; then
         if [ -z "$STOPPING" ]; then
             error_message "ERROR: Command \"tc $@\" Failed"
             stop_firewall
             exit 2
         fi
     fi
}

In other words, run_tc() simply passes it''s unmodified arguments to tc.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

Thanks Tom, 
In deed run_tc commands are written in the tcstart script file.
But I don''t understand why when I launch "run_tc class add dev
$DEVdc parent 2:1 classid 2:85 htb rate 1kbit ceil 1mbit burst 30kb prio 5"
every changes can be seen in the "shorewall show tc" output, except
the burst which becomes 4096Mb whereas 30kb is given to run_tc command...
And I''ve noticed if I launch: "run_tc class add dev $DEVdc parent
2:1 classid 2:85 htb rate 256kbit ceil 1mbit burst 30kb prio 5", 30kb burst
appears correctly in the "shorewall show tc" output.

 
________________________________

De: shorewall-users-bounces@lists.sourceforge.net de la part de Tom Eastep
Date: dim. 15/06/2008 15:53
À: Shorewall Users
Objet : Re: [Shorewall-users] Shorewall-3.2.9 - Burst 4096Mb in Traffic Control
!!!



Jean-Philippe RAMES wrote:
> Hello,
>
> All changes I make in shorewall config files are correctly applied except
the burst parameter when the rate is below 256kbit.
> The 30kb burst in config file becomes 4096Mb !!!
>
> In my config file :
> run_tc class add dev $DEVdc parent 2:1 classid 2:85 htb rate 1kbit ceil
1mbit burst 30kb prio 5
If you are putting that command in a Shorewall configuration file, it must
be an extension script.
>
> shorewall show tc :
> class htb 2:85 parent 2:1 prio 5 quantum 1000 rate 1000bit ceil 1000Kbit
burst 4096Mb/8 mpu 0b overhead 0b cburst 2100b/8 mpu 0b overhead 0b level 0
>  Sent 380235095 bytes 1052587 pkt (dropped 0, overlimits 0 requeues 0)
>  rate 500616bit 113pps backlog 0b 93p requeues 0
>  lended: 89803 borrowed: 962691 giants: 418
>  tokens: -1761054 ctokens: -17009
It which case, your problem report has nothing to do with Shorewall. All
''run_tc'' does is:

run_tc() {
     if ! tc $@ ; then
         if [ -z "$STOPPING" ]; then
             error_message "ERROR: Command \"tc $@\" Failed"
             stop_firewall
             exit 2
         fi
     fi
}

In other words, run_tc() simply passes it''s unmodified arguments to tc.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net <http://shorewall.net/> 
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key





-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

Jean-Philippe RAMES wrote:
> Thanks Tom,
> In deed run_tc commands are written in the tcstart script file.
> But I don''t understand why when I launch "run_tc class add
dev $DEVdc
> parent 2:1 classid 2:85 htb rate 1kbit ceil 1mbit burst 30kb prio 5" 
> every changes can be seen in the "shorewall show tc" output,
except the
> burst which becomes 4096Mb whereas 30kb is given to run_tc command...
> And I''ve noticed if I launch: "run_tc class add dev $DEVdc
parent 2:1
> classid 2:85 htb rate 256kbit ceil 1mbit burst 30kb prio 5", 30kb
burst
> appears correctly in the "shorewall show tc" output.
You should be asking these questions of the ''tc'' developer,
and not of me.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

Ok now I understand your previous answer.
A lot of things about tc are on the shorewall website, I thought tc was included
in and supported by shorewall.
Do you know where to get support on tc ?

________________________________

De: shorewall-users-bounces@lists.sourceforge.net de la part de Tom Eastep
Date: dim. 15/06/2008 21:28
À: Shorewall Users
Objet : Re: [Shorewall-users] RE : Shorewall-3.2.9 - Burst 4096Mb in Traffic
Control !!!



Jean-Philippe RAMES wrote:
> Thanks Tom,
> In deed run_tc commands are written in the tcstart script file.
> But I don''t understand why when I launch "run_tc class add
dev $DEVdc
> parent 2:1 classid 2:85 htb rate 1kbit ceil 1mbit burst 30kb prio 5"
> every changes can be seen in the "shorewall show tc" output,
except the
> burst which becomes 4096Mb whereas 30kb is given to run_tc command...
> And I''ve noticed if I launch: "run_tc class add dev $DEVdc
parent 2:1
> classid 2:85 htb rate 256kbit ceil 1mbit burst 30kb prio 5", 30kb
burst
> appears correctly in the "shorewall show tc" output.
You should be asking these questions of the ''tc'' developer,
and not of me.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net <http://shorewall.net/> 
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key





-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

Jean-Philippe RAMES wrote:
> Ok now I understand your previous answer.
> A lot of things about tc are on the shorewall website, I thought tc was
included in and supported by shorewall.
> Do you know where to get support on tc ?
linux-net@vger.kernel.org

If you don''t get a resolution there, try netdev@vger.kernel.org.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It''s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php