IPFW Bandwidth throttling?
Chris McGee
chris at xecu.net
Wed May 7 09:19:02 PDT 2003
Yes, there is definitely more traffic being sent than what it is limiting.
If I delete the pipe, the bandwidth will peak at the maximum bandwidth
that we have. Nothing is limiting the return traffic which is minimal
anyway. I'm going to change the HZ setting and see if that changes
anything.
On Wed, 7 May 2003, Barry Irwin wrote:
> Another thing to maybe try is up the HZ setting in your kernel. Have a look
> at the dummynet page.
>
> Barry
>
>
> --
> Barry Irwin bvi at itouchlabs.com Tel:
> +27214875178
> Systems Administrator: Networks And Security
> iTouch Technology
> iTouch TAS http://www.itouchlabs.com Mobile: +27824457210
>
>
> ----- Original Message -----
> From: "Greg Panula" <greg.panula at dolaninformation.com>
> To: "Chris McGee" <chris at xecu.net>
> Cc: <freebsd-security at freebsd.org>
> Sent: Wednesday, May 07, 2003 3:55 PM
> Subject: Re: IPFW Bandwidth throttling?
>
>
> > Chris McGee wrote:
> > >
> > > I am trying to limit outgoing SMTP traffic to about 14 Mbps and these
> are
> > > the IPFW rules I am using.
> > >
> > > ${fwcmd} add pipe 1 tcp from 192.168.0.0/24 to any 25 out via
> dc0
> > > ${fwcmd} pipe 1 config bw 14Mbit/s
> > >
> > > I've tried multiple tweaks to the pipe rule and I seem to be missing
> > > something. I only get about half the bandwidth I specify. Is this
> normal
> > > behavior? Is there something wrong with the rule I'm running?
> > >
> >
> > The pipe config & pipe rule look correct.
> >
> > Try 'ipfw pipe list' to confirm the pipe is configured for the correct
> > bandwidth and not dropping excessive amounts of packets.
> >
> > Is dc0 configured for 100Mbps or 10Mbps? 7Mbps is close to the ceiling
> > for a 10Mbps link.
> >
> > Are you sure you have ~2MBps worth of smtp traffic to pass when you're
> > watching? If you increase the bandwidth on the pipe do you see more
> > than the ~7Mbps you're currently seeing?
> >
> >
> > good luck,
> > greg
> > _______________________________________________
> > freebsd-security at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > To unsubscribe, send any mail to
> "freebsd-security-unsubscribe at freebsd.org"
> >
> >
> >
>
>
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"
>
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Chris McGee 301-682-9972
Xecunet www.xecu.net
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Dialup * Webhosting * E-Commerce * High-Speed Access
More information about the freebsd-security
mailing list