search for: netherlabs

Second test after big upgrade.. -- http://www.PowerDNS.com Open source, database driven DNS Software http://netherlabs.nl Open and Closed source services

...ters turned up a blank. man tc refers to a tc-filters (8) but trying to man that gives a no such page/section error. Googling on this seems to imply that the documentation was never created. The author also seems to have stop updating his blog/company site since 2007 based on the last login date on netherlabs.nl So I'm wondering is tc the current and recommended method for traffic shaping on CentOS or is there some newer method that has superceded it?

...As far as I can see, this is not allowed by RFC3597 section 4 paragraph 1/2. PowerDNS Recursor, like Unbound and BIND, now deals with this as 3597 section 4 paragraph 4 says we SHOULD. Nevertheless, it would be great if NSD could honor the MUST NOT in paragraph 2. Kind regards, -- Peter van Dijk Netherlabs Computer Consulting BV - http://www.netherlabs.nl/

Hello everybody, I am trying to understand the Advance routing and Traffic control. In the examples section of the how to an example script is given. Section 15.8.2 (the ultimate setup for Your internet connection) The example says download is 800 and upload is 220 ###### uplink # install root CBQ tc qdisc add dev ppp0 root handle 1: cbq avpkt 1000 bandwidth 10mbit Maybe I am

Hello, it seems, that filtering on nexthdr (TCP/UDP) content, especially src or dst port, is not working. The following has no effect on 2.4.16 or older (even 2.2) kernels: # tc filter add dev eth0 parent ffff: protocol ip prio 50 u32 match tcp dst 3128 0xffff police rate 40kbit burst 10k drop flowid :1 Even if # tc filter ls dev eth0 parent ffff: filter protocol ip pref 50 u32 filter protocol

Hi, I would like to control download bandwidth from the Internet for clients inside a network. The gateway is a Linux box using ''iptables nat''. I would like to use ''iptables mangle'' to mark the packets coming from the Internet and going to specific clients and then use CBQ to shape it: +-----------+ Internal network | Linux

I find the negative attitude toward CBQ to be distracting and non-professional in the HOWTO. I''ve re-read it for the first time in about a month and comments like "This can be configured in a variety of ways, which I do not understand. Use HTB" do not encourage me about the writer. This is not a personal critique, as I can imagine this being said on a personal website,

I didn''t received any email since 18 Feb ? What is happening ? ?!?!? --------------------------------- Do you Yahoo!? Yahoo! Small Business - Try our new resources site! _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi all, After reading a lot and searching on the INternet, I want to filter ASP and/or AH traffic According to /etc/protocols ESP and AH are IP protos 50 and 51 so this u32 filter should work ? (I can use fw filter because the firewall/VPN can''t mark pakets :-( tc filter add dev ethX parent X:0 protocol ip prio X u32 match ip protocol 50 0xff flowid X:XX ? Can someone confirm this ?

Hi, Actually, I did some modification on sch_fifo.c to do some required accumulation of packets lets say 300 packet and to dequeue them together but I couldn''t compile the modified fifo, the question is How can I compile and to test my modified fifo. Thanks in advance for your reply and help _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl

Hi All, I read the advanced networking howto and find a useful way to shape my adsl link. is says: "tc qdisc add dev ppp0 root tbf rate 220kbit latency 50ms burst 1500 [...] Change 220kbit to your uplinks *actual* speed, minus a few percent. If you have a really fast modem, raise ''burst'' a bit. " My adsl''s upload brandwidth is about 120 kbits/sec,

Hello I am running smcroute(version 0.9) on Linux 2.2.16-22 and I have configured two multicast (S,G) addresses to forward. The forwarding is working. I get the following message several times per minute. mroute: pending queue full, dropping entries The kernel has the following options CONFIG_IP_MULTICAST=y #CONFIG_IP_ROUTER=n # is this required??? CONFIG_IP_MROUTE=y CONFIG_NET_IPIP=m

I''m a newbie to tc and after some experimenting I have the following problem: # tc qdisc show qdisc sfq 8006: dev ipsec0 quantum 1514b perturb 15sec I can''t get rid of this entry. Is there a way to clear all entries? I tried all sorts of "tc qdisc del xxx" but nothing seems to work. It says: RTNETLINK answers: No such file or directory What syntax do I need to

Hi, I am developing on an embedded MIPS-based system; I have iproute2''s ip working correctly talking to the kernel, but tc seems to be broken. I''d like to fix this, but I need a little bit of help in figuring out how tc communictes with the kernel -- can someone tell me the places I should be looking? Thanks. Joseph

...ges, and improved others. New are tc-tbf.8, tc-sfq.8, tc-prio.8 and tc-red.8. Please check & use them. http://ds9a.nl/lartc/manpages -- http://www.PowerDNS.com Versatile DNS Software & Services Trilab The Technology People Netherlabs BV / Rent-a-Nerd.nl - Nerd Available - ''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

hi all.. i just noticed while patching ulog(patch-o-matic) with kernel-2.4.17--->patch not applied ! would be gratefull if someone can help on this ( Gurus ''am not a programmer pls.):-( arindam

...problems, don''t hesitate to contact me directly. I fully expect there to be some issues - I''ll try to solve them quickly. Regards, bert hubert -- http://www.PowerDNS.com Versatile DNS Software & Services Trilab The Technology People Netherlabs BV / Rent-a-Nerd.nl - Nerd Available - ''SYN! .. SYN|ACK! .. ACK!'' - the mating call of the internet

Hello all. I am not 100% familiar with the Linux advanced routing capbalieties yet, so I thought , after reading source code, documentation and more that I might be better off asking the experts on this list. I am not using this ina production environment, but at home, as a test case. First of all, here is the network topology. Internal LAN <--> Switch <--> [NAT/FIREWALL/INTERNAL LAN

Hi! I''ve got two FreeS/WAN gateways setup, with one subnet<->subnet tunnel setup, which is working fine. I''ve setup iproute2 to route anything for either subnet via the ipsec0 device using a src address of the local interface. This is to force locally generated traffic (ie, traffic generated on the server) to go through the VPN, rather than out with a source IP of the

...ctor, LInux i386 boot LOader $ file vmlinux vmlinux: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped Any clues? I think I've followed lhype.txt to the letter. Thanks! -- http://www.PowerDNS.com Open source, database driven DNS Software http://netherlabs.nl Open and Closed source services