similar to: tcng and scheduling ssh

People, I''m trying to set up the tc filters for a PRIO queue. I''m basing it off of marked traffic via iptables. For example, I''ve marked two classes of traffic with ids "2" and "4", and now I''m filtering those to bands 1 and 2. tc filter add dev eth0 parent 1: prio 0 protocol ip \ handle 2 fw flowid 10:1 tc filter add dev eth0 parent 1:

Hello, I''m trying to put 3 nodes in a vpn in tunnel mode. When I run setkey on the following file, I end up with The result of line 33: File exists. That error isn''t overly helpful, so I was hoping that someone could explain the issue. Here''s the file, with line 33 highlighted. Help appreciated. Mike # Flush the SAD and SPD flush; spdflush; # Add SA for

Hello, Looking here http://www.ipsec-howto.org/x299.html I''ve set up a vpn in transport mode with two linux boxes. I''m now trying to set it up in tunnel mode. After using the example keys, trying to ping, it doesn''t work because the route network isn''t routable. This mention is in the howto "If you tunnel is not working, please check your routing.

Hello, Looking here http://lartc.org/howto/lartc.tunnel.ip-ip.html It says to load a new_tunnel.o module. There is no such module on 2.6.9, so where would I find up-to-date documentation on ip tunnels in the Linux kernel? Thanks, Mike -- Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522 "Any intelligent fool can make things bigger and more complex... It takes a

Hi, I wanted to configure the following : 1. VPN + some other special connections (TCP 82,8282,23,22 and ICMP) to have priority over the rest 2. special upstream for our updating system on port 4000 3. within the VPN tunnels citrix traffic ( TCP 1494, 2598) + icmp has priority I need this for both incoming and outgoing traffic as it is the bandwith managment config on a central system from

Hi all, I have a little problem with my home-made slackware linux server. Here is the scenario: 1. I have a local wifi network 2. my server do masquerading and exit in internet via a PPPoE connection Goals: 1. not use SQUID 2. shaping the traffic with classes 3. emule connection must have minimum priority and a band-limit of 10KBytes/s in uplink (server--->internet) Any idea? Thx, Diego --

Hi, I try to shape my incoming traffic. I have 2MBit/s DSL bandwith and the following ruleset (on the internal interface): $INT="eth1"; $INT_NET=192.168.1.0; $MAX_IN=2Mbps; dev $INT { egress { class (<$int>) if ip_src:24 == $INT_NET; class (<$ssh>) if tcp_sport == PORT_SSH; class (<$smtp>) if tcp_sport == PORT_SMTP; class (<$http>) if

Newbie here... tcng version 10b I''m just learning about htb and using tcng. I am trying to make the example in Martin A. Brown''s Traffic Control with tcng and HTB HOWTO v0.5 example 2 /* * Simply commented example of a tcng traffic control file. * * Martin A. Brown <mabrown@securepipe.com> * * Example: Using class selection path. * * (If you are reading the

hi everyone, so,first it seemed a trivial question to me, but since I could not find anybody being neither able to answer this question nor giving a short config example. after a few sleepless nights and exhausting all the reading and research. here I am sharing my problem with all of you, in the hope of some possible solution/sugestion. or is it that this is impossible?? below my

I am considering creating a web interface for system administration, but it would need a plug-in architecture, adding new UIs as new services are added. I''m thinking about doing this with multiple Rails applications, and I''m curious as to whether mongrel can most multiple apps in a single instance, as opposed to running one for each. Is this possible? Thanks, Mike -- Michael P.

I can''t seem to match packets less than 512 bytes: class( <$bulk> ) if tcp_dport == 81 && !( ip_len & 0xfe00 ) ; or if tcp_dport == 81 && ip_len < 512 Both rules match any packet I send to port 81, even when the total IP length is much greater than 512 bytes: class htb 2:4 parent 2:1 leaf 5: prio 1 rate 8000bps ceil 24000bps burst 6Kb cburst 1839b Sent

Dear All I have a data.frame like that: structure(list(name = c("Gga_rs10722041", "Gga_rs10722249", "Gga_rs10722565", "Gga_rs10723082", "Gga_rs10723993", "Gga_rs10724555", "Gga_rs10726238", "Gga_rs10726461", "Gga_rs10726774", "Gga_rs10726967", "Gga_rs10727581", "Gga_rs10728004",

I am wanting to pass arguments to lokkit to set up the iptables config file with an entry like this: ( i dont want to manually edit it - I want to do it automatically) iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT I have a small script file that has in it the ports I want enabled, like: ------------------- PORT_SSH="--port=22:tcp"

Hi all, Can someone please help with a tcng setup? I have played with tc and tcng in the past, and now would like to get some serious rules in place. However, I have a difficulty in setting them up. My setup is as follows: One machine working as a firewall: eth0 is the interface connected to a 512K DSL line eth1 is connected to a LAN eth2 is connected to another LAN, a bit like a DMZ eth1 and

Hello, I''m running mongrel behind apache via proxypass. Every now and then, a spammer tries to proxy traffic through apache, and for some reason, apache forwards the request to mongrel, even though it''s not a site being hosted by me. At times this seems to cause mongrel to become unresponsive, and all requests to the site then fail with a proxy error until mongrel is

Hey, I''m using mongrel supervised via runit. I''d like to capture mongrel logs with svlogd, which just requires logging to stdout/stderr. But, the Rails app is logging in its own log directory. Is there a way to make both mongrel and Rails log to stdout/stderr? Thanks, Mike -- Michael P. Soulier <msoulier at digitaltorque.ca> "Any intelligent fool can make things

Hello Mailing list, I have a problem with the prio qdisc and I don´t know what is wrong in my configuration This ist a sample configuration and looks like this: #include "fields.tc" #include "ports.tc" #define X16(i) i i i i i i i i i i i i i i i i dev ppp0 { dsmark { prio(bands 6, priomap X16($be)) { class if ip_proto == IPPROTO_UDP;

Hi all, I'm having issue with my Centos 5.1 /Xen installation. I'm having some dom0 running 2.6.18-53.1.6.el5xen (x86_64). On the dom0 where the load is high (more than 70% of total system memory consumed by dom0 and domU) we have a lot of "memory squeeze ". The result is that the domU seems to be blocked (no network/no disk acces/ etc....). Looking for a solution in xen

Hi all, I'm having issue with my Centos 5.1 /Xen installation. I'm having 2 dom0 running 2.6.18-53.1.4.el5xen (x86_64). These two dom0 are connected to a SAN. These two dom0 hosts multiple domU like Centos 4.5 (2.6.9-55.0.9.ELxenU) and Centos 5.1 (2.6.18-53.1.4.el5xen). These two dom0 run ntpd to synchronize dom0 time. When i start a virtual machine on the first dom0 all seems good, the

Hi, I''ve recently deployed a rails app and our platform is Apache 2.2 + mongrel cluster. It seems to be working fine... although no real tests yet. I just recently found out that it is *quite* possible that the live server will not be getting an update to apache 2.2, and the current version is 1.3. So... I''ve installed Apache 1.3 + FastCGI on the dev server and it''s