Hello Tom, I recieve the answer on my question from Patrick McHardy which discuss ''cls_flow'' module on ''http://kerneltrap.org/mailarchive/search/@subject+%22%5BNET_SCHED+00/04%5D:+External+SFQ+classifiers/flow+classifier%22/linux-netdev''. May be his answer help you to understand as we can use this module. Regards, Alex ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
alex wrote:> Hello Tom, > I recieve the answer on my question from Patrick McHardy which discuss > ''cls_flow'' module on > ''http://kerneltrap.org/mailarchive/search/@subject+%22%5BNET_SCHED+00/04%5D:+External+SFQ+classifiers/flow+classifier%22/linux-netdev''. > May be his answer help you to understand as we can use this module.I hacked together a prototype based on what I now understand, but when I activate the prototype on an interface, I can''t ping the default gateway out of that interface :-( -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
Hello Tom, This is yet another bit of the information about our subject. May be you can contact with Patrick for to get more detail information at first hand and discover this not very clear part (but may be useful) of the Linux network properties? Alex ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
alex wrote:> Hello Tom, > This is yet another bit of the information about our subject. May be > you can > contact with Patrick for to get more detail information at first hand and > discover this not very clear part (but may be useful) of the Linux network > properties?Alex, I now have a version of this running. I''ve uploaded a preview of 4.2.6 to http://www1.shorewall.net/pub/shorewall/development/staging/4.2/shorewall-4.2.6/. Please experiment with it and see how effective it is in doing what you are trying to do. See the release notes for details (be sure to use the release notes in the download directory and not the ones in the packages; the latter are out of date). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
Tom Eastep wrote:> alex wrote: >> Hello Tom, >> This is yet another bit of the information about our subject. May be >> you can >> contact with Patrick for to get more detail information at first hand and >> discover this not very clear part (but may be useful) of the Linux network >> properties? > > Alex, > > I now have a version of this running. I''ve uploaded a preview of 4.2.6 > to > http://www1.shorewall.net/pub/shorewall/development/staging/4.2/shorewall-4.2.6/. > > Please experiment with it and see how effective it is in doing what you > are trying to do. See the release notes for details (be sure to use the > release notes in the download directory and not the ones in the > packages; the latter are out of date). >After testing this some more, I don''t believe it''s ready to try yet. Use at your own risk. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
> Tom Eastep wrote: >> alex wrote: >>> Hello Tom, >>> This is yet another bit of the information about our subject. May be >>> you can >>> contact with Patrick for to get more detail information at first hand and >>> discover this not very clear part (but may be useful) of the Linux network >>> properties? >> >> Alex, >> >> I now have a version of this running. I''ve uploaded a preview of 4.2.6 >> to >> http://www1.shorewall.net/pub/shorewall/development/staging/4.2/shorewall-4.2.6/. >> >> Please experiment with it and see how effective it is in doing what you >> are trying to do. See the release notes for details (be sure to use the >> release notes in the download directory and not the ones in the >> packages; the latter are out of date). >> > > After testing this some more, I don''t believe it''s ready to try yet. Use > at your own risk.Hello Tom! My congratulations! But what is the problem? Do you think it can be solved (after some investigations, experiments and tests) or this is principal thing that don''t suit for us (may be in current time while)? Thank you VERY MUCH for your efforts. Alex ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
alex wrote:>> Tom Eastep wrote: >> After testing this some more, I don''t believe it''s ready to try yet. Use >> at your own risk. > > Hello Tom! > My congratulations! But what is the problem? Do you think it can be > solved > (after some investigations, experiments and tests) or this is principal > thing > that don''t suit for us (may be in current time while)?It''s hard to say. The problem that I''m having is that when a flow filter is applied to an SFQ qdisc, the qdisc will eventually start dropping more and more packets until no traffic flows at all! Try this experiment on a non-critical Linux box: tc qdisc add dev eth0 root handle 1: sfq quantum 1514 limit 127 tc filter add dev eth0 protocol ip pref 1 parent 1: handle 1 flow hash keys src,dst,proto-src divisor 1024 That should in theory be the same filter that gets applied by default. Use the box a while and see what happens (YMMV). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
Tom Eastep wrote:> alex wrote: >>> Tom Eastep wrote: >>> After testing this some more, I don''t believe it''s ready to try yet. Use >>> at your own risk. >> Hello Tom! >> My congratulations! But what is the problem? Do you think it can be >> solved >> (after some investigations, experiments and tests) or this is principal >> thing >> that don''t suit for us (may be in current time while)? > > It''s hard to say. The problem that I''m having is that when a flow filter > is applied to an SFQ qdisc, the qdisc will eventually start dropping > more and more packets until no traffic flows at all! > > Try this experiment on a non-critical Linux box: > > tc qdisc add dev eth0 root handle 1: sfq quantum 1514 limit 127 > tc filter add dev eth0 protocol ip pref 1 parent 1: handle 1 flow > hash keys src,dst,proto-src divisor 1024 > > That should in theory be the same filter that gets applied by default. > Use the box a while and see what happens (YMMV).BTW - In my experiments, adding perturbation doesn''t help (e.g., ''perturb 10'' at the end of the ''qdisc add'' command). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
> Tom Eastep wrote: >> alex wrote: >>>> Tom Eastep wrote: >>>> After testing this some more, I don''t believe it''s ready to try yet. Use >>>> at your own risk. >>> Hello Tom! >>> My congratulations! But what is the problem? Do you think it can be >>> solved >>> (after some investigations, experiments and tests) or this is principal >>> thing >>> that don''t suit for us (may be in current time while)? >> >> It''s hard to say. The problem that I''m having is that when a flow filter >> is applied to an SFQ qdisc, the qdisc will eventually start dropping >> more and more packets until no traffic flows at all! >> >> Try this experiment on a non-critical Linux box: >> >> tc qdisc add dev eth0 root handle 1: sfq quantum 1514 limit 127 >> tc filter add dev eth0 protocol ip pref 1 parent 1: handle 1 flow >> hash keys src,dst,proto-src divisor 1024 >> >> That should in theory be the same filter that gets applied by default. >> Use the box a while and see what happens (YMMV). > > BTW - In my experiments, adding perturbation doesn''t help (e.g., > ''perturb 10'' at the end of the ''qdisc add'' command).Sorry, Tom. At this moment i have not any possibility to test Shorewall. But despite this circumstance i want to improve it. I forward your letter to Patrick with request to advise something for solving this problem. Alex ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com