ALTQ and tun
Wiktor Niesiobedzki
bsd at w.evip.pl
Thu Jul 22 13:04:41 PDT 2004
Hi,
Recently I configured my DSL link to use pf+ALTQ instead of
ipfw+DUMMYNET, but I encountered following problem:
- no single packet wents through the ALTQ
I guess, that I miss something very trival, but for checkout:
pf.conf:
iext_if="tun0
int_if="dc0"
altq on $ext_if priq queue {dc, ssh_interactive, ssh_bulk, other}
queue dc priority 0
queue ssh_interactive priority 15
queue ssh_bulk priority 3
queue other priority 7 priq(default)
pass out on $ext_if proto tcp from any to any port 22 tos 0x10 queue ssh_interactive label ssh_inter
pass out log on $ext_if proto tcp from any to any port 22 tos 0x08 queue ssh_bulk label ssh_bulk
pass out log on $ext_if proto tcp from any to any port 22 queue ssh_interactive label ssh_inter2
pass out log on $ext_if proto tcp from any to any user dctc queue dc label dc_transfer
#pass out on $ext_if inet proto tcp from ($ext_if) port 61412 to any queue dc label dc_transfer_port
pass out on $ext_if proto tcp from krz.mine.nu port 61412 to any label dc_transfer_port
pass in log on $ext_if proto tcp from any to ($ext_if) port {22,80,113,61412} label pass_in_tcp
pass in log on $ext_if proto udp from any to ($ext_if) port 61412 label pass_in_udp
pass in on $ext_if proto tcp from any to any port 4662 label pass_in_mule queue dc
pass in on $ext_if proto udp from any to any port 4672 label pass_in_kad queue dc
pass out log on $ext_if proto { tcp, udp } all keep state label pass_out_all queue other
pass out on $ext_if inet proto icmp all icmp-type {0,1,3,4,8,11,12} keep state
pass in on $int_if all label pass_in_internal
pass out on $int_if all label pass_out_internal queue other
And for example:
# pfctl -v -s rule
[...]
pass out log on tun0 proto tcp all keep state label "pass_out_all" queue other
[ Evaluations: 25193 Packets: 855303 Bytes: 645597787 States: 13 ]
pass out log on tun0 proto udp all keep state label "pass_out_all" queue other
[ Evaluations: 3023 Packets: 10152 Bytes: 1222129 States: 2 ]
[...]
# pfctl -v -s queue
queue dc priority 0
[ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ]
[ qlength: 0/ 50 ]
queue ssh_interactive priority 15
[ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ]
[ qlength: 0/ 50 ]
queue ssh_bulk priority 3
[ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ]
[ qlength: 0/ 50 ]
queue other priority 7 priq( default )
[ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ]
[ qlength: 0/ 50 ]
Nothing. Just like ALTQ was not enabled, but then, how to enable it?
Can someone point me out, what I am missing in my configuration?
Cheers,
Wiktor Niesiobedzki
More information about the freebsd-current
mailing list