ipfw - TRAFFIC SHAPER

[alexus]

On Fri, Oct 9, 2009 at 1:22 PM, alexus <alexus at gmail.com> wrote:
> On Fri, Oct 9, 2009 at 12:57 PM, Brent Bloxam <brentb at beanfield.com> wrote:
>> alexus wrote:
>>>
>>> I'm trying to fight with ipfw and unfortunately unsuccessfully...
>>>
>>> I created following rules
>>>
>>> ipfw pipe 1 config bw 1Mbit/s
>>> ifpw add 8080 pipe 1 tcp from any to any src-port www
>>> ifpw add 8080 pipe 1 tcp from any to any dst-port www
>>>
>>> yet I see peaks of my traffic is way higher them 1Mbit/s
>>> i have following modules loaded through kldload
>>>
>>>  2    3 0xffffffff80cd3000 15db8    ipfw.ko
>>>  5    1 0xffffffff80cec000 bbc8     dummynet.ko
>>>
>>> i even load
>>>
>>> 10    1 0xffffffff80e7d000 14df     ipdivert.ko
>>>
>>> and that still didn't help :(
>>> can anyone help me?
>>>
>>
>> Do you have an ipfw rule allowing www traffic before rule 8080?
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>>
>
> no, nothing related to www, in fact the only rules I have before that
> one is followings:
>
> 00100 19704   3856110 allow ip from any to any via lo0
> 00200     0         0 deny ip from any to 127.0.0.0/8
> 00300     0         0 deny ip from 127.0.0.0/8 to any
>
> that's it...
>
> --
> http://alexus.org/
>

the other thing is kind of weird is when I do ipfw pipe show I get
same results no matter how many times I do that

su-3.2# ipfw pipe show
00001:   2.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
  0 tcp     72.21.81.133/80       64.237.55.83/51986 176846 168906331
44 56988 6909
su-3.2#


-- 
http://alexus.org/