OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Markus Hennecke (henneckeweb.de)
Date: Tue Apr 02 2002 - 04:52:37 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Realized that I replied to Brian directly without cc'ing the list. (I
    shouldn't answer mails when it gets too late...) So here is the reply
    for the list:

    At 07:25 01.04.2002 -0600, Brian Camp wrote:
    >I'm having difficulties limiting incomming traffic with altqd under
    >3.0-stable. The situation is as follows:
    >
    >computerA is 10.0.0.1
    >computerB is 10.0.0.2
    >
    >computerA is running altqd with the following altqd.conf:
    >interface dc0 bandwidth 100M cbq
    >class cbq dc0 root_dc0 NULL pbandwidth 100
    >class cbq dc0 def_dc0 root_dc0 borrow pbandwidth 95 default
    >class cbq dc0 compb_frm def_dc0 exactbandwidth 64000
    > filter dc0 compb_frm 0 0 10.0.0.2 0 0
    >class cbq dc0 compb_to def_dc0 exactbandwidth 64000
    > filter dc0 compb_to 10.0.0.2 0 0 0 0
    >
    >computerB downloads from computerA at 64k, but uploads at several megs a
    >second (clearly not limited by altqd). My question is, why isn't computerB
    >-> computerA limited and what should I change to limit it.
    This is because altqd only operates on the outgoing queue of an interface,
    so the uploads are not matched and get full speed. If computerA would have
    been a router with two interfaces you could limit the bandwidth on the
    interface that sends the packets out, but not with a single interface.

    I read something about filtering on the ingoing queue on the altq mailing
    list. If somebody has done that successfully with OpenBSD please drop me
    a line so I could solve a similar problem here...

    Greetings
       Markus