I''m using shorewall 3.0.4 and had started using the internal tc option recently. I noticed that the tc rules for the classes I created don''t have the burst parameter (although the ingress qdisc does). I think it would be nice if there was a burst by default (and of course it would even be better if it were configurable). Here''s a patch to the firewall script, adding a default 10k burst to all classes: --- firewall.orig 2006-04-28 19:13:32.000000000 +0300 +++ firewall 2006-04-28 19:14:30.000000000 +0300 @@ -3390,7 +3390,7 @@ [ -n "$devnum" ] || fatal_error "Device $device not defined in $devfile" - ensure_and_save_command tc class add dev $device parent $devnum:1 classid $classid htb rate $rate ceil $ceil prio $prio quantum $(calculate_quantum $rate) + ensure_and_save_command tc class add dev $device parent $devnum:1 classid $classid htb rate $rate ceil $ceil burst 10k prio $prio quantum $(calculate_quantum $rate) ensure_and_save_command tc qdisc add dev $device parent $classid handle 1$mark: sfq perturb 10 # add filters if [ -n "$CLASSIFY_TARGET" ]; then ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642