search for: tvskat

hi, does someone tried bridge and or router functionality of linux kernel on multiprocessor system. Does multiprocessor system increase network performance or give ability to process higher traffic.. What about highest possible troughput someone have achieved ? etc.. tia _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl

what is the limit on the arp cache entires ?! Does someone have very big LANs with linux-routers ? How big ? (i mean flat L2 network, not segmented) I want to know how much can my net can scale ? thanx _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Anyone to know iproute-save, iproute-restore like script similar iptables-save/restore ? that stores everytihng routes,rules,tables everything ... then init.d-script that among other things stores the state on shutdown :") (thats easy then) ----- http://linuxtoday.com/news_story.php3?ltsn=2004-12-08-004-32-OS-BZ-DT-0005 snip> MS Office is popular in the same way as heart disease is the

> Message: 8 > Date: Fri, 14 Mar 2003 21:49:49 +0200 > From: raptor <raptor@tvskat.net> > To: lartc@mailman.ds9a.nl > Subject: [LARTC] [tcng] X:Y to tcng corespondence ! > > Is there a easy way that I to get class-id<----->tcng-class-path conversation.... and vs. versa.. > > --__--__-- There are couple files can be created by tcc: # cat a.tc dev &quo...

does someone have expirience with HTB and kernel 2.6.5 and up... Does anyone have tested it with thousand of classes and filters.. How it behaves.. tia _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

hi I would like to ask is the following config correct for what I want to achieve ... Scenario: I have 3 networks 192.168.12.0/24, 192.168.48.0/24, 192.168.56.0/24 and most of the users use 1 IP, some of them more... If I make flat u32-filter search the box will make aprox/max 3 * 256 = 768 checks for every IP, so i''m deciding to deploy u32 hashes.. Here is the config I think to use

Unless the bridge keeps stateful inspection data and can reply back to the session''s origin, not it route then its fine. The only way I can see this working is either putting the FTP/.. DMZ behind the firewall giving true firewall protection for all services involved, or if you just want to kludge the current solution, you can perform a DNAT/SNAT interface bounce like the following: #

hi, I have strange problems with HTB and several hundred classes flat structure i.e. root |--50kbps |--30kbps |--50kbps |--80kbps |--100kbps .... several hundred classes like this Ceil is the same as rate. The machine get no more than 2-3% average cpu(2.4Ghz pentium). What happens is that from time to time the traffic got "stalled". I tried numerous things to solve

Hi, I have config like this ,... but all traffic goes to the default class 1:4, WHY ? What I'' doing wrong... filters are attached to the root ! tc qdisc add dev eth0 handle 1:0 root htb default 4 tc class add dev eth0 parent 1:0 classid 1:4 htb rate 55kbit ceil 55kbit prio 7 <--default class tc class add dev eth0 parent 1:0 classid 1:1 htb rate 20Mbit tc qdisc add dev

hi, Is there benefit of running 2 cpus box for shaper ? ----- http://linuxtoday.com/news_story.php3?ltsn=2004-12-08-004-32-OS-BZ-DT-0005 snip> MS Office is popular in the same way as heart disease is the most popular way to die. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

hi, I have a real networks on the eth0 side and real network on the eth1 side. a.a.a.0/24 x.x.x.0/24 <eth0--SNAT-box--eth1:0> y.y.y.2/24 <====> y.y.y.1/24 <===>INTERNET z.z.z.0/24 I want to nat those behind eth0 to go out as y.y.y.0/24 (eth1 is with another address different gw and address, so that i''m using eth1:0 and separate rule&table) I''m currently

hi I was wondering is pppoe scalable enought to support Gbps speeds or at least tens of hundred of Mbps ? From the docs I read it seems that after user is auth over pppoe the client traffic still passes over ppp-channel from pppoe-client <---> pppoe-server <---> Internet Instead of pppoe-client <---> Internet m''I correct with this assumption ? From this I

hi, I have two situation where I need two targets in one rule ....... First one iptables -N syn-flood iptables -A syn-flood -m limit --limit ${synConns} --limit-burst ${synBurst} -j RETURN iptables -A syn-flood -j DROP iptables -A protect -p tcp --syn -j syn-flood Now I want to be able to say : iptables -A syn-flood -m limit --limit ${synConns} --limit-burst ${synBurst} -j LOG --log-prefix

It seems that the value of net.ipv4.ip_conntrack_max has no so much to do with the conntrack ''cause the when I measure current number of connections i.e.: wc -l /proc/net/ip_conntrack they show as ~20-30 000 connection, but I set sysctl -w net.ipv4.ip_conntrack_max=150000 and packets get dropped, I have to set it to value above 200 000 so that packets are not dropped ?!! Any idea

hi, I have very annoying problem.. First a simple diagram : x.x.1.0/24 -----------------| x.x.2.0/24 -----------------|---- (gw: eth0: x.x.1.1 eth1: x.x.2.1 eth1: x.x.3.1) ----> x.x.3.0/24 -----------------| now I have two machines x.x.3.10 (2.4 kernel) and x.x.3.11(2.6 kernel) AND they are in the same LAN (phisical net) but as u see in different IP (logical nets). As I look the traffic

Is there some shortcut of MARK & RETURN at once , instead of doing this : iptables -A FORWARD -t mangle -s x.x.x.x/24 -j MARK --set-mark 1 iptables -A FORWARD -t mangle -s y.y.y.y/24 -j MARK --set-mark 1 ................................ iptables -A FORWARD -t mangle -s z.z.z.z/24 -j MARK --set-mark 1 the idea is that when a packet is marked I dont want further processing in this chain... so

hi, I still dont use 2.6 and udev ... is it ready for use by servers... I''m happy with my current 2.4 servers...and I want to know will using 2.6&udev will give me some benefits on network (tcp/ip) oriented server, I mean : QoS (tc, HTB), ip route, iptables server... most of the reviews of 2.6 expose advances in VM,FS etc... at least when comparing the speed and scalability ...

any idea why i get this : # esearch cfg-update Traceback (most recent call last): File "/usr/bin/esearch", line 3, in ? from output import bold, red, green, darkgreen, turquoise, nocolor ImportError: No module named output # eupdatedb Traceback (most recent call last): File "/usr/sbin/eupdatedb", line 7, in ? from output import red, darkgreen, green, bold,

why if I place a fw filter on root I cant place the u32 filter with the same prio. filter add ... parent root prio 1 fw ... filter add ... parent root prio 1 u32 ... <-gives error, but filter add ... parent root prio 2 u32 .x.x.x.1. filter add ... parent root prio 2 u32 x.x.x.1 no problem with this... I know that the priorities tells the order at which to check them(is the order

hi, Is there some shotcoming if I use an linux-bridge instead of a linux-router .. if the box has to act as qos-server and firewall ?! I have never used linux as bridge tia _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/