IPFW Bandwidth throttling?

Chris McGee chris at xecu.net
Wed May 7 09:19:02 PDT 2003


Yes, there is definitely more traffic being sent than what it is limiting.
If I delete the pipe, the bandwidth will peak at the maximum bandwidth
that we have. Nothing is limiting the return traffic which is minimal
anyway.  I'm going to change the HZ setting and see if that changes
anything.

On Wed, 7 May 2003, Barry Irwin wrote:

> Another thing to maybe try is up the HZ setting in your kernel. Have a look
> at the dummynet page.
>
> Barry
>
>
> --
> Barry Irwin         bvi at itouchlabs.com                    Tel:
> +27214875178
> Systems Administrator: Networks And Security
> iTouch Technology
> iTouch TAS      http://www.itouchlabs.com         Mobile: +27824457210
>
>
> ----- Original Message -----
> From: "Greg Panula" <greg.panula at dolaninformation.com>
> To: "Chris McGee" <chris at xecu.net>
> Cc: <freebsd-security at freebsd.org>
> Sent: Wednesday, May 07, 2003 3:55 PM
> Subject: Re: IPFW Bandwidth throttling?
>
>
> > Chris McGee wrote:
> > >
> > > I am trying to limit outgoing SMTP traffic to about 14 Mbps and these
> are
> > > the IPFW rules I am using.
> > >
> > >         ${fwcmd} add pipe 1 tcp from 192.168.0.0/24 to any 25 out via
> dc0
> > >         ${fwcmd} pipe 1 config bw 14Mbit/s
> > >
> > > I've tried multiple tweaks to the pipe rule and I seem to be missing
> > > something.  I only get about half the bandwidth I specify.  Is this
> normal
> > > behavior?  Is there something wrong with the rule I'm running?
> > >
> >
> > The pipe config & pipe rule look correct.
> >
> > Try 'ipfw pipe list' to confirm the pipe is configured for the correct
> > bandwidth and not dropping excessive amounts of packets.
> >
> > Is dc0 configured for 100Mbps or 10Mbps?  7Mbps is close to the ceiling
> > for a 10Mbps link.
> >
> > Are you sure you have ~2MBps worth of smtp traffic to pass when you're
> > watching?  If you increase the bandwidth on the pipe do you see more
> > than the ~7Mbps you're currently seeing?
> >
> >
> > good luck,
> >  greg
> > _______________________________________________
> > freebsd-security at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-security
> > To unsubscribe, send any mail to
> "freebsd-security-unsubscribe at freebsd.org"
> >
> >
> >
>
>
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"
>

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Chris McGee                             301-682-9972
Xecunet	                                www.xecu.net
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Dialup * Webhosting * E-Commerce * High-Speed Access








More information about the freebsd-security mailing list