AltQ + ng_iface

Jeremie Le Hen jeremie at
Fri Jul 29 09:51:48 GMT 2005

Hi Daniel, Chunk, Julian and all,

> >slow things down.  So you want to send dataless ACKs at a higher 
> >priority than generic big packets full of data, maybe via the "iplen" 
> >keyword with "established", look for packets smaller than ~100 bytes?
> [...]
> I sometimes actually prioitise ALL small packets allowing interactive 
> stuff to
> bypass ftps etc. and sometimes I do it on both ends.

I personnaly use the following rules on egress of my external interface
to "prioritize" (although that's not Dummynet do) some packets.  This
works very well, I can make two parallel uploads at full upstream
bandwidth without my SSH session or my download being impacted :

ACKs:			tcp from any to any iplen 40-60 tcpflags ack
Interactive SSH:	tcp from any to any 22 iptos lowdelay
			tcp from any 22 to any iptos lowdelay
DNS requests:		udp from any to any 53
Small PONG:		icmp from any to any icmptype 8 iplen 1-200
HTTP(S), FTP:		tcp from any to any 21,80,443

Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >

More information about the freebsd-net mailing list