similar to: Some questions concerning IPtables (& IMQ/SFQ)

What''s wrong... I have Celeron 633MHz nd 768Mb RAM. When I''m running my script everything is OK, but when I''m connecting Internet and LAN link computer is hanging. But when i dissconnect this everything is OK. I have 500 users, 1500 classes and 3000 filters. Is it normal? What should I do?

Hello, I wrote a simple traffic shaping script (below) that should have allowed me to shape my internet traffic a bit (ppp0 - adsl 128kbit/64kbit; local interface eth0). The script works only partially - the speed is being limited but too much. Without running this script my download rate is about 10kBytes (with second computer also downloading at about 6kBytes). After running it my download speed

Hi If I use sfq qdisc on a CBQ class I get a lot of dropped packets and the backlog itr almost always to its full value: 128. From the HOWTO I understand that the queue is at 128 packets, and SFQ shows 128/1024 flows , but how can I increase that value ? I have tried ip link set txqueuelen but this only increases the tx queue on the interface. qdisc sfq d468: quantum 1514b limit 128p flows

After starting to shape local traffic now i am getting a lot of kernel panics in tcp_retransmit, so i decided to update my kernel from 2.6.17.14 to 2.6.21.1 , the problem is that after that i get: # iptables -t mangle -A POSTROUTING -o eth0 -j IMQ --todev 0 iptables: No chain/target/match by that name so i can not redirect ttraffic to IMQ device. and modules are loaded. - # lsmod Module

hi all, i want to try htb3 with imq downloaded & patched imq & htb3 with kernel-2.4.18 on rh7.2 but got STUCK on step 1 :( this are what i did can anyone guide me what went wrong on the first step itself !! [root@cab1 root]# modprobe imq numdevs=1 modprobe: Can''t locate module imq [root@cab1 root]# [root@cab1 root]# tc qdisc add dev imq0 handle 1: root htb default 1 Cannot find

Dear all, I''m reading codes in sch_sqf.c in kernel 2.4 of Linux. I find I messed up with the concept of slot, bucket and hash tables. Could anyone explain the data stucture of the hash tables a little to me. Thanks very much. Best, Franklin BTW: I can not understand why the number of entries of dep[SFQ_DEPTH*] should be twice:( _______________________________________________ LARTC

Hi all, my IMQ device works OK (thanks to Andy Furniss), but now I''ve problems to attach the traffic in the qdisc''s. This is my conf: ----------------------------------------------------------------------- INET | |eth0 300Kbps ROUTER (NAT) |eth1 | LAN ----------------------------------------------------------------------- MAX=300 tc qdisc add dev imq0 root handle 1: htb

Hi all, I want to divide the incoming traffic between what should go to the firewall and what should be forwarded to the local network behind it. I started with the IMQ example config, but added an extra htb class right below "10:1" to get the two sfq''s to borrow each other''s bandwidth. However, I can''t figure out how to set the two marks. According to this

Folks, I''m so surprised what happened to my box just in the few weeks lately. Here is my setup: INTERNET <----------> [eth0] SHAPER-BOX [eth1] <----------> USER-FARM both eth0 & eth1 got public ips (202.x.x.x) Why traffic monitored at eth0 is bigger than eth1 ? eth1 shaped just exactly the same as rate i defined in HTB. I just have 1024Kbps from my ISP and i defined the

Hi! I have read all informations i could find, but some things are still not clear. My setup is: ---INTERNET1(eth0)-\ /- Local net1 (eth2) GW ---INTERNET2(eth1)-/ \- Local net2 (eth3) I have NAT and a working setup using HTB,SFQ, classifying with the iptables -j CLASSIFY way. I shape only the traffic coming from the internet heading to the intranet. I would like

Hi all and tc Gururs i have patched the IMQ and htb to kernel, but when i do egress filtering, iam not able to see any traffic and excusted the following the commands modprobe imq numdevs=1 tc qdisc add dev imq0 handle 1: root htb default 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 100kbit tc qdisc add dev imq0 parent 1:1 handle 10: htb default 1 tc class add dev imq0 parent

> > SFQ is very useful as a leaf qdisc. But by default, its internal queue > > length is 128 which is too much for small classes or even for > > not-so-fast links. Changing SFQ_DEPTH in net/sched/ sch_sfq.c to about > > 10-20 results in flows responding much faster to bandwidth changes. I''m not sure I understand what problem is being described, but I suspect

Hello, I''ve just recently started to use IMQ and I got puzzled after seeing the imq usage example on the linuximq.net site: It was something like this: tc qdisc add dev imq0 handle 1: root htb default 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 1mbit tc qdisc add dev imq0 parent 1:1 handle 10: htb default 5 tc class add dev imq0 parent 10: classid 10:1 htb rate 256kbit

Hi folks, I`ve a problem to use HTB and SFQ. The first script, below, to show a simple configuration, does work fine...!!! But, in the second example, does not work, becouse i put more code to clasify the traffic by protocol, http and ftp in this case. Somebody can tell me the errors? Thx, in advance.- NOTICE: IMQ device is to asociate with ETH1 my external iface. SCRIPT que funciona:

Hello I have a server with a dsl connection on eth1 and local interface eth0. Because of the NAT i cannot direct traffic to IMQ device in PREROUTING chain but have to use INPUT and FORWARD. So i use rules. iptables -t mangle -A INPUT -i eth1 -j IMQ --todev 0 iptables -t mangle -A FORWARD -i eth1 -j IMQ --todev 0 And now the strange thing: FORWARD traffic gets directed nicely to the IMQ, but

Witam I''ve found many examples where packets are redirected to IMQ device in PREROUTING chain for ingress traffic shaping purposes. But is there any sense in redirecting packets to IMQ in FORWARD chain also for ingress traffic shaping purposes? -- Pozdrawiam Marcin mailto:slacklist@op.pl _______________________________________________ LARTC

hi stef oone more pb while shaping incoming traffic with imq .this one tc qdisc add dev imq0 root handle 1: htb default 20 tc class add dev imq0 parent 1: classid 1:1 htb rate 2mbit burst 15k tc class add dev imq0 parent 1:1 classid 1:10 htb rate 1mbit tc class add dev imq0 parent 1:1 classid 1:20 htb rate 1mbit tc qdisc add dev imq0 parent 1:10 handle 10: pfifo tc qdisc add dev imq0 parent

Hello there, Can someone please explain why do one neeed IMQ ? I can already shape incoming traffic on my nat router by creating qdiscs on LAN-side interface. I have done some tests, whith simple bandwidth limmiting, and it works. I''ve read just about all the stuff on www.linuximq.net ... but couldn''t make myself an ideea on why would someone need IMQ for ingress policing ...

I''ve followed this list for quite a long time and have even posted a couple of times. I used the early versions of IMQ from Devik (I think that was his name), and it worked well. I only ever got the chance to implement it in my test environment. I now need to implement it in my production environment. My Linux core router has nine interfaces and has a 27 megabit connection to the