Hi, After more research, and a couple of kind replies to earlier questions, I''ve tried putting ''index nnn'' in my ingress policers. It appears that connections matching ingress policers with (say) ''rate 32kbit index 20'' share a total incoming bandwidth pool of 32kbits. Is that indeed the case? In other words - if I have one ingress policer that matches 3 current connections, and another ingress policer matching 2 current connections, and both policers are set to ''rate 32kbit index 20'' - is it true that inbound bandwidth for all 5 connections is throttled to a shared total of 32kbit? Thanks and regards David -- leave this line intact so your email gets through my junk mail filter _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
One remark: policers have nothing to do with incoming bandwitch they also can be used with any forwarded trafic, (if you will make attempt to use them on localy originated packets you can even hang your computer) As I observed, setting ''rate 32kbit index 20'' for each will not do anything good, they were behaving like independent clasess, so total trafic was sum of all rates. then I reduced rates for all clases su that sum of the rates was max rate alocated for that poll and it worked more or less. I am not sure if this was correct. probably the best way to find how index works is to look at source code. It can be very usefull feature. Which could alow do this: if www trafic rate exceeds 100kb/s then drop all p2p packets I was trying this in such way class www policer rate 100kbit index 20 class p2p policer index 20 drop more or less it was working ----- Original Message ----- From: "David McNab" <david@rebirthing.co.nz> To: <> Sent: Sunday, March 14, 2004 4:55 AM Subject: [LARTC] Specific question on ingress policing> Hi, > > After more research, and a couple of kind replies to earlier questions, > I''ve tried putting ''index nnn'' in my ingress policers. > > It appears that connections matching ingress policers with (say) ''rate > 32kbit index 20'' share a total incoming bandwidth pool of 32kbits. > > Is that indeed the case? > > In other words - if I have one ingress policer that matches 3 current > connections, and another ingress policer matching 2 current connections, > and both policers are set to ''rate 32kbit index 20'' - is it true that > inbound bandwidth for all 5 connections is throttled to a shared total > of 32kbit? > > Thanks and regards > David > > -- > > leave this line intact so your email gets through my junk mail filter > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ >_______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Roy wrote:> As I observed, setting ''rate 32kbit index 20'' for each will not do anything > good, > they were behaving like independent clasess, so total trafic was sum of all > rates. > then I reduced rates for all clases su that sum of the rates was max rate > alocated for that poll > and it worked more or less.That''s a good approach. I can easily change pyshaper (mentioned in earlier post) so that once it determines the number of connections matching a criterion, it divides the bandwidth allocation by the number of such connections, and generates tc ingress policing filter commands accordingly.> I am not sure if this was correct. > > probably the best way to find how index works is to look at source code.I''m very time-constrained. Given that I''m often having to study source code just to find out how to use other programs, I don''t have the time to do this with tc, sadly. When someone writes a thorougly detailed manual on tc usage (including a complete tc-filters manpage), it''ll be a good thing.> class www policer rate 100kbit index 20 > class p2p policer index 20 dropCan you please provide all your *complete* tc commands, so I can see this in context and form an understanding?> more or less it was workingGood to know. -- Kind regards David -- leave this line intact so your email gets through my junk mail filter _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/