Bandwidth shaping for different flows

[Siddhartha Jain]

Siddhartha Jain wrote:

> Hello,
> 
> I want to do bandwidth shaping using dummynet. I want the box to act as
> a bridge only and no layer-3 filtering. To that effect, I have the
> following parameters in /etc/sysctl.conf:
> 
> net.link.ether.bridge_cfg=ed0,rl0
> net.link.ether.bridge=1
> net.link.ether.bridge_ipfw=1
> net.link.ether.ipfw=1
> net.inet.ip.fw.one_pass=1
> net.inet.ip.fw.enable=0
> 
> 
> My first question is that does this ensure that packets are processed at
> the bridge level and not at layer-3? I am a bit confused between these
> two parameters:
> net.link.ether.bridge_ipfw, and
> net.link.ether.ipfw
> 
> What is the effect of each specifically?

Still need to know this.

> 
> Two is that I am trying to allocate different bandwidth limits for:
> 1. Internet to home-network-A (in and out) - 128Kbps
> 2. Home-network-B to Home-Network-A (in and out) - 1Mbps
> 
> So I do:
> ipfw -f flush
> ipfw add pipe 1 ip from any to Network-A
> ipfw add pipe 2 ip from Network-B to Network-A
> ipfw pipe 1 config bw 128Kbit/s queue 10
> ipfw pipe 2 config bw 1000Kbit/s queue 10
> 
> But I find that the effective limit is 128Kbps only for all transfers!!
> Why isn't the traffic between Network-A and B put in pipe-2?

Sorry, stupid question. I realised that the packets enters a pipe as 
soon as one matches it profile and does not go thru the whole rule-base 
before entering a pipe. So just changed precedence. Works now.

Thanks,

Siddhartha