pf/altq

[Arie Kachler]

Thank you for your response David.
We basically need to limit the bandwidth of each one of our customers 
based on what they have contracted. Some customers have simple, mostly 
web traffic, while some others have very complex patterns with lots of 
DNS/mail/web/ssh/etc.
But your telling me that sustained 80Mbps is possible tells me that it 
is a robust system.
We haven't even started testing, but your response gives us the 
confidence to at least spend the time testing.

Thanks again David.



David J. Orman wrote:
> I've dealt with that much traffic without issue. It all depends on the *type* of traffic though. If you get some really extensive rules going (expensive CPU-wise type rules) you might run into issues depending on the processing power of the machine. Also, your pps could be wildly different than mine, even at the same 100Mbps rate. We ended up moving to a dedicated router for reliability reasons, *not* the incapacity of FreeBSD to handle the traffic with PF/ALTQ. 
>
> At 100Mbps, I don't think you will have any issues. Testing against simulated load like your real load is the only way you're going to know for sure, though - so I hesitate to say "It'll work great!"
>
> We were doing transparent filtering (over bridged adapters) with somewhat complex rulesets, for a web-server farm, on 100Mbps, utilizing 80Mbps consistantly. We used altq to prioritize http traffic over everything else.
>
> Cheers,
> David
>
> ----- Original Message -----
> From: Arie Kachler <akachler at telcom.net>
> Date: Wednesday, September 27, 2006 10:45 am
> Subject: pf/altq
> To: freebsd-isp at freebsd.org
>
>   
>> Hello,
>>
>> We need to replace our bandwidth management solution because it's 
>> not 
>> working properly anymore.
>> Does anybody have experience with pf/altq in high traffic 
>> production 
>> environments. We expect to run 100Mbps through each pf/altq box.
>> Man pages don't show shortcomings one may experience in real life.
>>
>> Any real life experiences you can share will be greatly appreciated.
>>
>> Arie Kachler
>>
>>
>> _______________________________________________
>> freebsd-isp at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
>> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>>
>>     
>
>
> .
>
>