On 12/16/2015 3:22 PM, Karl Denninger wrote:> > On 12/16/2015 14:20, Mike Tancsa wrote: >> I need to do some simple traffic shaping, but whenever I try and use >> altq, I dont seem to have any luck-- I mean zero. >> >> I like the management of pf via pf.conf, but miss the simplicity of >> dummynet and ipfw. Has anyone used pf and ipfw together in RELENG10 ? >> Any tips / caveats ? Or am I better off re-writing the pf rules into >> ipfw and be done with it. >> >> ---Mike > What are you trying to do? > > I use rate-shaping in ipfw without problems and have been for quite some > time.Protect some boxes via pf, and then limit one box from eating up all the bandwidth when doing a backups and syncs. I would like to keep pf for firewall rules, and I would like to use ipfw+DUMMYNET for bandwidth shaping ---Mike -- ------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike at sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/
On 12/16/2015 15:02, Mike Tancsa wrote:> On 12/16/2015 3:22 PM, Karl Denninger wrote: >> On 12/16/2015 14:20, Mike Tancsa wrote: >>> I need to do some simple traffic shaping, but whenever I try and use >>> altq, I dont seem to have any luck-- I mean zero. >>> >>> I like the management of pf via pf.conf, but miss the simplicity of >>> dummynet and ipfw. Has anyone used pf and ipfw together in RELENG10 ? >>> Any tips / caveats ? Or am I better off re-writing the pf rules into >>> ipfw and be done with it. >>> >>> ---Mike >> What are you trying to do? >> >> I use rate-shaping in ipfw without problems and have been for quite some >> time. > Protect some boxes via pf, and then limit one box from eating up all the > bandwidth when doing a backups and syncs. > I would like to keep pf for firewall rules, and I would like to use > ipfw+DUMMYNET for bandwidth shaping > > > ---Mike >I use this... ipfw pipe 1 config bw 3000Kbit/s ipfw add 1700 pipe 1 tcp from {wherever} to any (and so on.... you can add any sort of flow into the pipe, and it will honor that limit) Works very well. -- Karl Denninger karl at denninger.net <mailto:karl at denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/ -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 2996 bytes Desc: S/MIME Cryptographic Signature URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20151216/cb9c4ddc/attachment.bin>