LARTC - Apr 2002 - Ingress policing

Hi all,

Currently, I''m experimenting with ingress policing. Is it possible to
attach multiple u32 filters to the same policer or attach one policer to
multiple u32 filters? I would like to define a shared meter, so the rate of the
traffic that matches any u32 is accumulated. In the "Edge32-ca-u32"
example, they also use a shared meter, but I don''t quite understand how
it''s done. Can someone help me out?

thanks,
Jan

---
Jan Coppens
Ghent University - IMEC

Department of Information Technology (INTEC)
Broadband Communication Networks (IBCN)

Sint-Pietersnieuwstraat, 41
B-9000, Gent
Belgium

E-mail: Jan.Coppens@intec.rug.ac.be
Phone: +32 (0)9 267 35 90
Fax: +32 (0)9 267 35 99-ca-

On Fri, Apr 12, 2002 at 05:09:14PM +0200, Jan Coppens
wrote:
> Hi all,
> 
> Currently, I''m experimenting with ingress policing. Is it possible
to
> attach multiple u32 filters to the same policer or attach one policer to
> multiple u32 filters? I would like to define a shared meter, so the rate
> of the traffic that matches any u32 is accumulated. In the
"Edge32-ca-u32"
> example, they also use a shared meter, but I don''t quite
understand how
> it''s done. Can someone help me out?
I''m not sure if I really understand you. But I *can* tell you that you
do
not attach policers to filters. The filter contains a policer.

Regards,

bert

-- 
http://www.PowerDNS.com          Versatile DNS Software & Services
http://www.tk                              the dot in .tk
http://lartc.org           Linux Advanced Routing & Traffic Control HOWTO

----- Original Message -----
From: "bert hubert" <ahu@ds9a.nl>
To: <lartc@mailman.ds9a.nl>
Sent: Sunday, April 14, 2002 12:19 PM
Subject: Re: [LARTC] Ingress policing

> On Fri, Apr 12, 2002 at 05:09:14PM +0200, Jan Coppens wrote:
> > Hi all,
> >
>
> > Currently, I''m experimenting with ingress policing. Is it
possible to
> > attach multiple u32 filters to the same policer or attach one policer
to
> > multiple u32 filters? I would like to define a shared meter, so the
rate
> > of the traffic that matches any u32 is accumulated. In the
"Edge32-ca-u32"
> > example, they also use a shared meter, but I don''t quite
understand how
> > it''s done. Can someone help me out?
>
> I''m not sure if I really understand you. But I *can* tell you that
you do
> not attach policers to filters. The filter contains a policer.
Yes I know, but can multiple filters share the same policer so you police
the traffic that matches those filters. For example, you have a u32 filter
that matches all traffic from host1 and another u32 that matches all traffic
from host2. Now I would like to police both traffic streams so if the sum of
the rates of both streams exceeds a certain rate, the all packets in both
streams are remarked/dropped. Is this possible?

Cheers,
Jan
>
> Regards,
>
> bert
>
> --
> http://www.PowerDNS.com          Versatile DNS Software & Services
> http://www.tk                              the dot in .tk
> http://lartc.org           Linux Advanced Routing & Traffic Control
HOWTO
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
>