similar to: u32 filter divisor/hashkey

Hi, I need to set filter-hash and use source-port as hashkey. It seems that I can''t use "hashkey" without using "match". I am using following commands: tc qdisc add ... root handle 1:0 htb # Loop to add 1000 classes (i = 1 to 1000) tc class add ... parent 1:0 classid 1:$i #set filters tc filter add ... protocol ip parent 1:0 u32 tc filter add ...

Hi, I''ve been working on hashing in tc for a month. Since there are only a limited number of avaialbe example on hashing, I''ll be appreciate if someone can my questions as follows: 1. tc filter add dev eth1 protocol ip perent 1:0 \ prio 5 u32 ht 800:: \ match ip src 1.2.0.0/16 \ hashkey mask 0x000000ff at 12 \ link 2: It seems that the hashkey make can only applied to ip

I''m hashing on a non-octet boundary, and it doesn''t seem to be working. I''ve got this set of filters, that does work: # root tc filter add dev eth1 \ parent 1: protocol ip prio 2 \ u32 # ht tc filter add dev eth1 \ parent 1: protocol ip prio 2 \ handle 2: \ u32 divisor 256 # flow tc filter replace dev eth1 \

hi I would like to ask is the following config correct for what I want to achieve ... Scenario: I have 3 networks 192.168.12.0/24, 192.168.48.0/24, 192.168.56.0/24 and most of the users use 1 IP, some of them more... If I make flat u32-filter search the box will make aprox/max 3 * 256 = 768 checks for every IP, so i''m deciding to deploy u32 hashes.. Here is the config I think to use

What is the difference between lines below? $TC filter add dev imq0 parent 1:0 prio 5 handle 1: protocol ip u32 divisor 1 $TC filter add dev imq0 parent 1:0 prio 5 handle 2: protocol ip u32 divisor 256 What divisor is doing? And the last problem... $TC filter add dev imq0 protocol ip parent 1:0 prio 5 u32 ht 800:: match ip src 10.0.0.0/16 hashkey mask 0x000000ff at 12 link 2: Why after ht

hi all, i saw this message today & am reporting it(as it says) [root@cab1 surfNet]# tail -f /var/log/messages Sep 1 04:02:03 cab1 syslogd 1.4.1: restart. Sep 1 09:35:27 cab1 kernel: HTB: mindelay=500, report it please ! [root@cab1 root]# iptables -V iptables v1.2.6a [root@cab1 root]# tc -V tc utility, iproute2-ss020116 [root@cab1 root]# uname -a Linux cab1 2.4.19-r #2 Sun Aug 25 01:49:24

Hi i have 2 class C 80.97.103.0/24 and 81.180.12.0/24 but i dont konw how to set hashing tables for HTB tc add dev eth0 parent 1: prio 0 handle 1: protocol ip u32 divisor 256 tc add dev eth0 parent 1: prio 0 protocol ip u32 match src 80.97.103.0/24 hashkey mask 0x000000FF at 12 link 1: but i want 2 hashkey for 80.97.103.0/24 and for 81.180.12.0/24 can somebody help me ? this is a part fo my

iproute2 distribution in README.iproute2+tc includes toward the end an example of usage of syntax ''offset mask'' as follows: # Lookup hash table, if it is not fragmented frame # Use protocol as hash key $TC filter add dev eth1 parent 1:0 prio 5 handle ::1 u32 ht 800:: \ match ip nofrag \ offset mask 0x0F00 shift 6 \ hashkey mask 0x00ff0000 at 8 \ link 1: Also, identical

Hello, I wonder if there is a way to have a divisor bigger than 256 when creating hash tables with u32. It would really be great. Thanks

Hi, Shorewall version -4.0.12-2 (EL5 rpm version) OS : Centos 5.2 I have shorewall successfully running on Linux with multi ISP. Trying to make services such as "rsync, ftp" go through my secondary ISP. For which I did the following eth0 : Internal LAN eth4 : DSL (Second ISP) => x.x eth5 : T1 (First ISP) => y.y Created the following entries in

Hi, in my lan I have two firewall, fw1 is the first and manage inte-vlan routing. Fw2 manage internet and dmz. fw1 and fw2 have an interface (eth4 for both fw2 and fw1) on the same subnet that permit to the host behind fw1 to reach internet, my problem is on fw2: eth4 is the NIC that connect fw2 and fw1, I would''t like masquerading hosts behind fw1, so to eth4 of fw2 arrive all

Hi i have 2 class C 80.97.103.0/24 and 81.180.12.0/24 but i dont konw how to set hashing tables for HTB tc add dev eth0 parent 1: prio 0 handle 1: protocol ip u32 divisor 256 tc add dev eth0 parent 1: prio 0 protocol ip u32 match src 80.97.103.0/24 hashkey mask 0x000000FF at 12 link 1: but i want 2 hashkey for 80.97.103.0/24 and for 81.180.12.0/24 can somebody help me ?

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=40 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-02-03 16:49 ------- We haven't seen this

Hello newsgroup, I hope somebody with more routing experience then me can help me with the problem I have. The setup is as described below. A dual internet provider routing, multiple local area networks, and a dmz network with one public and one private ip range. I followed the instructions at lartc.org, and so far everything is working. The default route is via

I have a question about a few things: ok when you have parent x:x and handle x:x link x:x flowid and so on. What is the max values of each of these, also where these or some of these hex numbers? I tried this on redhat 7.3 so there may have been some updates, but this is one of the tests I did. [root@RL1 root]# tc filter add dev eth0 protocol ip parent 1:0 prio 10 u32 ht fffe:: match ip dst

Hi, Please suppose following config: Two external interfaces for two different providers On each of them configured NAT for specific IP addr. ie. 4: eth2: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc htb qlen 100 inet 1.1.1.30/30 brd 1.1.1.31 scope global eth2 6: eth4: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc htb qlen 100 inet 2.2.2.66/27 brd 2.2.2.95 scope global eth4 On eth2

Hello, I am attempting a PXE boot between two systems, each with multiple network cards. While there are a total of 8 ports on each computer, only two (each) are connected as follows: Boot Server eth0 - 10GbE fiber channel (private to the set of computers being managed) (Qlogic) eth4 - 1Gb ethernet (public and out of my sphere of management) (NetExtreme II)

I''ve got a linux machine (fedora core 3) with 4 network cards. I looked at the howto and the only example that is close to what I need to do is section 4.2 on multiple uplink providers. I feel like I''m so close but just can''t get my head around the final part. Here is what I have eth2 and eth4 connect to 2 different isps. I want all connections the come from my dmz

http://bugzilla.netfilter.org/show_bug.cgi?id=680 Willie <MidSpeck at hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |MidSpeck at hotmail.com --- Comment #8 from Willie <MidSpeck at hotmail.com> 2011-12-16 21:29:19 --- I

List admins. Can you fix the issue described below, ie jamal''s posts to the lists bouncing, please? -------- Forwarded Message -------- From: Russell Stuart <russell-lartc@stuart.id.au> To: hadi@cyberus.ca Cc: Stephen Hemminger <shemminger@osdl.org>, netdev@vger.kernel.org Subject: Re: [PATCH] TC: bug fixes to the "sample" clause Date: Tue, 14 Mar 2006 13:16:52