Tom, first of all, thanks for the great shorewall, I''ve been using it
for a long time and haven''t really needed support in years. Until
now...
I am installing a new server with shorewall-4.4.27-1 downloaded from
invoca.ch.
The problem is that after migrating the config from the old server (had
shorewall-4.4.24), I see these tc rules created
run_tc qdisc add dev imq0 handle ffff: ingress
run_tc filter add dev imq0 parent ffff: protocol all prio 10 \
estimator 250ms 4sec basic \
police avrate 0kbit action drop
even though I have in_bandwidth set to 0 in tc_devices. If I understood
correctly how the estimator works, they shouldn''t be created.
Am I missing something?
Thanks.
Pablo.
------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don''t need a
complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual
desktops for less than the cost of PCs and save 60% on VDI infrastructure
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
On Fri, 2012-01-06 at 13:37 -0200, Pablo Sebastian Greco wrote:> Tom, first of all, thanks for the great shorewall, I''ve been using it > for a long time and haven''t really needed support in years. Until > now... > > I am installing a new server with shorewall-4.4.27-1 downloaded from > invoca.ch. > The problem is that after migrating the config from the old server > (had shorewall-4.4.24), I see these tc rules created > run_tc qdisc add dev imq0 handle ffff: ingress > run_tc filter add dev imq0 parent ffff: protocol all prio 10 \ > estimator 250ms 4sec basic \ > police avrate 0kbit action drop > > > even though I have in_bandwidth set to 0 in tc_devices. If I > understood correctly how the estimator works, they shouldn''t be > created. > > Am I missing something?Put ''-'' in the IN_BANDWIDTH column. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don''t need a complex infrastructure or vast IT resources to deliver seamless, secure access to virtual desktops. With this all-in-one solution, easily deploy virtual desktops for less than the cost of PCs and save 60% on VDI infrastructure costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
El 06/01/2012 15:09, Tom Eastep escribió:> On Fri, 2012-01-06 at 13:37 -0200, Pablo Sebastian Greco wrote: >> Tom, first of all, thanks for the great shorewall, I''ve been using it >> for a long time and haven''t really needed support in years. Until >> now... >> >> I am installing a new server with shorewall-4.4.27-1 downloaded from >> invoca.ch. >> The problem is that after migrating the config from the old server >> (had shorewall-4.4.24), I see these tc rules created >> run_tc qdisc add dev imq0 handle ffff: ingress >> run_tc filter add dev imq0 parent ffff: protocol all prio 10 \ >> estimator 250ms 4sec basic \ >> police avrate 0kbit action drop >> >> >> even though I have in_bandwidth set to 0 in tc_devices. If I >> understood correctly how the estimator works, they shouldn''t be >> created. >> >> Am I missing something? > Put ''-'' in the IN_BANDWIDTH column. > > -Tom >That worked great, thanks. ------------------------------------------------------------------------------ Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don''t need a complex infrastructure or vast IT resources to deliver seamless, secure access to virtual desktops. With this all-in-one solution, easily deploy virtual desktops for less than the cost of PCs and save 60% on VDI infrastructure costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox