Shorewall users - Oct 2006 - Multi-isp and QoS woes

Hi guys,
  I managed to get my loadbalancing setup most of the way to where I
want it, but I''m having trouble with getting QoS working. 
Here''s the
setup: I have a machine with 4 ethernet adapters - 2 onboard 10/100
connected to two 10 mbit half-duplex ethernet connections (both on
10.8.4.*), and 2 gigabit offboard bridged together and connected to my
other machines, on 192.168.1.*.  So Shorewall has "interfaces" entries
for eth0, eth1, and br0.  I''m running shorewall 3.0.7 on Debian
unstable.
  This was all working fine - I could start bittorrent on my machine,
and if I had a large enough torrent (I''ve been using the Debian
dvd-image torrents, they''ve usually got a few hundred peers) I could
upload at 2 MB/s, which was my primary goal.  However, then web
browsing was pretty terrible.  So I started looking into QoS.
  When I added the rules and activated them, though, I got unexpected
behavior.  My upload speed dropped from 2 MB/s to a little over 1.
Taking a look at mrtg, I''m getting traffic over both interfaces, but
each interface is only going at about half capacity.  Any idea what''s
causing this?

  I have done a "shorewall dump" as suggested on the shorewall
homepage; it''s at http://userpages.umbc.edu/~willm1/dump.gz .  Please
check it out and let me know if you have any suggestions as to what
went wrong and what I can do to fix it.

Thanks!
Will

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

Will Murnane wrote:
> 
>   I have done a "shorewall dump" as suggested on the shorewall
> homepage; it''s at http://userpages.umbc.edu/~willm1/dump.gz . 
Please
> check it out and let me know if you have any suggestions as to what
> went wrong and what I can do to fix it.
As stated at the top of the Shorewall Traffic Shaping page, the
Shorewall community is not well equiped to answer traffic shaping
questions. And tht includes me.

But I can tell you that your Multi-ISP marks are selecting the TC class
for the vast majority of your traffic. See
http://www1.shorewall.net/PacketMarking.html and remember that
''track''
sets the connection mark which then gets copied to the packet mark. So
by default, connections out of eth0 have mark = 1 and those out of eth1
have mark = 2. So unless your FORWARD marking rules overwrite those
marks, they are used for traffic classification.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642