ipfw and ipsec processing order for outgoing packets wrong

Vincent Poy vincepoy at gmail.com
Mon Nov 1 05:54:36 PST 2004


On Mon, 1 Nov 2004 05:24:06 -0800, Vincent Poy <vincepoy at gmail.com> wrote:
> On Mon, 1 Nov 2004 05:13:21 -0800, Vincent Poy <vincepoy at gmail.com> wrote:
> 
> 
> > On Mon, 1 Nov 2004 14:20:10 +0200, Ari Suutari <ari at suutari.iki.fi> wrote:
> >
> >
> > > > The counters for queue 1 keeps increasing when I do a ftp out even for
> > > > non-ACK packets but the other counters for queue 2-4 doesn't move at
> > > > all so it seems like everything is going out one queue instead of what
> > > > the rules actually say.  I have one pipe configured as 480Kbit/sec
> > > > which is what rules 63005-63008 does.
> > >
> > >    Are you using IPsec ?
> > >
> > >        Ari S.
> > 
> > Nope... As you can see, I'm just using ipfw2 with dummynet for
> > pipe/queue just for traffic shaping.
> 
> Maybe this will explain it better as this was what my rules are based on:
> 
> 
> http://www.topfx.com/prioritizingackfreebsd.shtml

Looks like the problem fixed itself for whatever reason.  Now I'm
getting the 400KB/s down/52KB/s up when I do file transfers at the
same time instead of 200KB/s down/52KB/s up like when I updated
-CURRENT after 7 months.  I guess it must be some coincidence that
SBC's ATM network had problems.

Cheers,
Vince


More information about the freebsd-net mailing list