need help with keep state and shaping

news at topocentras.lt news at topocentras.lt
Wed Jul 30 06:43:20 UTC 2008


Hello once more,
It whould be very interesting to hear from you how to use keep state for
router, shaping in and out traffic.
I am using around thousand of queues(hfsc) and it makes a lot of
performace problems. Using keep state it would reduce it, but as i mention
before, i have problems using it.

Sincerely Yours,
Albertas

> ext_if="bge0"
> int_if="bge1"
>
> pass out quick on $ext_if from 10.0.0.1 to any queue upload1
> pass out quick on $int_if from any to 10.0.0.1 queue download1
>
> pass out quick on $ext_if from 10.0.0.2 to any queue upload2
> pass out quick on $int_if from any to 10.0.0.2 queue download2
>
> pass out quick on $ext_if from 10.0.0.3 to any queue upload3
> pass out quick on $int_if from any to 10.0.0.3 queue download3
>
> pass in all
> pass out all
>
> #10.0.0.x users subnet
>
> Hello,
> I have problems with keep state usage. I need to shape ingoing and
> outgoing trafic (no nat).
> Before I used sintax like above, but then I used it with keyword "keep
> state" some useres reported problems with trafic.
> With version FreeBSD 7 with keep state on pass rules are not working at
> all.
> Question is how to deal with keep state for in and out trafic then i need
> to shape both? I tried to use set state-policy if-bound but it had no
> impact.
>
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
>




More information about the freebsd-pf mailing list