[FreeBSD 5.2] Bandwith and packet throttling

Fargo Holiday galaxy.ranger at gmail.com
Sun Aug 15 11:37:55 PDT 2004


On Sun, 15 Aug 2004 12:42:43 +0200, Pawel Malachowski
<pawmal-posting at freebsd.lublin.pl> wrote:
> On Sat, Aug 14, 2004 at 02:28:36PM -0700, Fargo Holiday wrote:
> 
> > Here are the rules I've been trying, let me know if this not correct:
> >
> > ipfw pipe 1 config bw 50Kbit/s queue 10 delay 2000ms #outbound
> > ipfw pipe 2 config bw 150Kbit/s queue 10 delay 2000ms #inbound
> > ipfw add deny icmp from any to any
> 
> Blocking all ICMP traffic is a Very Bad Thing.
> 
> > ipfw add pipe 1 all from 10.0.0.8 to any
> > ipfw add pipe 2 all from any to 10.0.0.8
> >
> > The painful delay was to test if the pipes were actually working, but
> > never seemed to make a difference.
> 
> Try:
> ipfw show
> ipfw pipe show 1
> ipfw pipe show 2
> and look at counters.
> 
> --
> Paweł Małachowski
> 

Thanks for the reply. The ICMP was more experiment than anything, I've
sinced removed it. Here are the results of the show commands:

cramster# ipfw show
00050 14819576  8458459132 divert 8668 ip from any to any via dc0
00100      250       32470 allow ip from any to any via lo0
00200        0           0 deny ip from any to 127.0.0.0/8
00300        0           0 deny ip from 127.0.0.0/8 to any
65000 44478701 31835950367 allow ip from any to any
65100        0           0 pipe 1 ip from 10.0.0.8 to any
65200        0           0 pipe 2 ip from any to 10.0.0.8
65535        0           0 deny ip from any to any

cramster# ipfw pipe show 1
00001:  50.000 Kbit/s 2000 ms   10 sl. 0 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
cramster# ipfw pipe show 2
00002: 150.000 Kbit/s 2000 ms   10 sl. 0 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000

Are those masks valid? Do I need to configure a queue explicitly
before passing these commands?

Thanks again,
Fargo


More information about the freebsd-net mailing list