nested ipfw dummynet pipes
rizzo at icir.org
Fri Jun 20 10:46:40 PDT 2003
On Fri, Jun 20, 2003 at 01:41:21PM -0400, Don Bowman wrote:
> is there any way, in a bridging config, to have nested pipes?
net.inet.ip.fw.one_pass=0 should do the job, i think the comment
in the manpage is now incorrect and the code (in net/bridge.c)
has been fixed (one-line) to implement this.
Check the commit logs, i don't have them handy at the moment.
> In particular, what i would like to achieve is a rule that
> allows e.g. 64kbps per host (src-mask 0xffffffff), but
> that all these hosts are in an overall 10Mbps pipe. The idea
> will be that @ some times of the day the pipe is less than
> full, so everyone gets 64kbps, but @ other times of the day
> the pipe is full, and I don't want more than 10Mbps flowing.
> net.inet.ip.fw.one_pass looks to do what i want but:
> "Note: bridged and layer 2 packets coming out of a pipe are never
> reinjected in the firewall irrespective of the value of this
> suggests this is not the case.
> Is there some technique using e.g. netgraph? Or can someone suggest
> why the note is there and if it might be easily removed?
> e.g. what i have is a system with
> em0 <--> em1
> net.link.ether.bridge_cfg="em0 em1"
> freebsd-net at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
More information about the freebsd-net