[LARTC] HTB: far unequal behaivor at a slight conf rate change

2006-02-23 Thread Luciano Ruete
Hi all! I'm working in a _really_ end user simple, yet powerfull, flexible, scalable, GPL htb/htb-init front end, but now, in the test fase im facing an utlimate problem... Absoult minimalistic scenario: #Use a FIXEDFONT to read this #inet-ethx-|FIREWALL|-lan-ethx - |client_host_1| #

Re: [LARTC] HTB: far unequal behaivor at a slight conf rate change

2006-02-23 Thread Luciano Ruete
El Thursday 23 February 2006 19:38, Andreas Klauer escribió: On Thu, Feb 23, 2006 at 07:08:27PM -0300, Luciano Ruete wrote: root-parent_all_host(256,256)-client_host_1(X,X)-host_1_prio(X*0.9,X) -host_1_dfl(X*0.1,X) What's the purpose

Re: [LARTC] HTB: far unequal behaivor at a slight conf rate change [Solved]

2006-02-25 Thread Luciano Ruete
El Friday 24 February 2006 06:36, Andreas Klauer escribió: On Thu, Feb 23, 2006 at 11:42:16PM -0300, Luciano Ruete wrote: with vde_switch daemon listening in a tuntap device. I suppose that htb is device independet, i hope it does not matter. I don't have any experience with vde_switch

[LARTC] Software Anounce: htb frontend, for multiple hosts auto bandwidth management

2006-03-01 Thread Luciano Ruete
Hi all, i've coded htb-gen, a GPL htb frontend and much more... htb-gen is meant to be an easy, scalable, yet powerfull, bandwidth management tool. You can set up/down portions of bandwith for each host or network, that goes trough your router/firewall. Prioritary traffic(web, mail, gaming, ftp,

Re: [LARTC] Htb queueing problem

2006-03-02 Thread Luciano Ruete
El Thursday 02 March 2006 12:59, Andy Furniss escribió: Diego Andrés Asenjo Gonzalez wrote: Hi again! $IPT -A FORWARD -t mangle -p udp -s 172.16.0.185/32 -i eth1 --sport 1:10100 -d 172.16.1.0/24 -j MARK --set-mark 0x44 This should be -o eth1 or you should be shaping it on eth0 or

Re: [LARTC] Software Anounce: htb frontend, for multiple hosts auto bandwidth management

2006-03-02 Thread Luciano Ruete
El Wednesday 01 March 2006 16:47, Luciano Ruete escribió: Hi all, i've coded htb-gen, a GPL htb frontend and much more... htb-gen is meant to be an easy, scalable, yet powerfull, bandwidth management tool. Ok, a brain-o of my part, let the first public release without upload shape working

Re: [LARTC] HTB - Rate errors

2006-04-26 Thread Luciano Ruete
El Wednesday 26 April 2006 13:00, Luke McConnell escribió: Hi, I'm trying to get HTB working correctly on Centos4 (RHEL-based) with kernel 2.6.9-34.EL. I have two gigabit network interfaces bridged together and I have created the following: tc qdisc add dev eth2 root handle 1: htb default 1

[LARTC] MULTIPATH: how to control chache expiration time?

2006-04-27 Thread Luciano Ruete
I have a 2.6.12(ubuntu-patchset), kernel recompiled with this routing options: [*] IP: advanced router [*] IP: policy routing [*] IP: equal cost multipath Load balancing is working great, but i have problems whits long term tcp flows (like msn-messenger or vpns or any other

Re: [LARTC] HTB at 100+ Mbits/sec

2006-05-12 Thread Luciano Ruete
On Friday 12 May 2006 12:35, Muthukumar S wrote: Iperf has a demonstrated behavior that when running more than one copy at the same time on the same box (client side); that the timing of each will start to effect the other copies. This is a function of how Iperf does it's timing (spin

Re: [LARTC] Detecting p2p traffic

2006-05-22 Thread Luciano Ruete
On Monday 22 May 2006 03:26, Andrew Beverley wrote: Jason Boxman wrote: On Sunday 07 May 2006 19:43, Andrew Beverley wrote: After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: snip

Re: [LARTC] how to debug RTNETLINK invalid argument?

2006-05-23 Thread Luciano Ruete
El Tuesday 23 May 2006 13:17, George Nychis escribió: Hey, I am getting an invalid argument trying to insert a qdisc: [EMAIL PROTECTED] iproute2]# tc qdisc add dev eth0 root xcp capacity 50Mbit limit 500 RTNETLINK answers: Invalid argument I'm not sure whats wrong here, because i can

Re: [LARTC] TCNG HTB priority and bandwidth

2006-05-29 Thread Luciano Ruete
On Monday 29 May 2006 02:47, [EMAIL PROTECTED] wrote: Hi, I have several users on the lanside each allocated separate IP addresses. I need to allocate th traffic to each IP addresses certain portion of total uplink. Say, 192.168.0.2 rate 128kbps, ceil 128kbps. 192.168.0.3 rate 65kbps, ceil

Re: [LARTC] Problems with Routing and Masquerading

2006-05-30 Thread Luciano Ruete
On Tuesday 30 May 2006 11:32, Vinod Chandran wrote: Hi, I have a linux box which balances load between two interfaces ( say WAN1 and WAN2). I have masquerading on for any request coming from LAN to the outside world. If WAN ips are static, you can use iptables -t nat ... -o WAN1 -j SNAT

Re: [LARTC] Problems with Routing and Masquerading

2006-05-30 Thread Luciano Ruete
On Tuesday 30 May 2006 13:23, Jason Boxman wrote: Luciano Ruete wrote: snip Besides that, you need to solve the problems that multipath will arise, like TOS situation described above or route cache expiration, that could made long term conns to be routed over a new iface. The solutions

Re: [LARTC] iptables CLASSIFY and MARK not working?

2006-05-30 Thread Luciano Ruete
On Tuesday 30 May 2006 16:25, Eliot, Wireless and Server Administrator, Great Lakes Internet wrote: [snip] You'll notice that the iptables rules show matches for class 5:510, 5:511, and others; yet, the only class taking traffic here is 5:2. just to exaust possibilities... i think that 5:2

Re: [LARTC] How to explde HTB.INIT tc commands?

2006-06-16 Thread Luciano Ruete
On Friday 02 June 2006 11:15, Stefano Mainardi wrote: Hi to all, i'm using htb.init for configuring my shaper. Now i want to know if it possible to show how htb.init make and use TC, anyone has tried it? ./htb.init compile #(RTFM) -- Luciano ___

Re: [LARTC] working patches for load balancing

2006-06-17 Thread Luciano Ruete
El Saturday 17 June 2006 12:51, Vladimir Vitkov escribió: Hi, i want to do load balancing of 2 ISP's Everything is set up OK but one of the ISP's is loaded on 100% while the other is utilised on 1 - 5% Is CONFIG_IP_ROUTE_MULTIPATH_CACHED set on your kernel config? -- Luciano

Re: [LARTC] working patches for load balancing

2006-06-18 Thread Luciano Ruete
El Sunday 18 June 2006 05:12, Vladimir Vitkov escribió: yes it is set. Also both round robin and weighted modes Ok, then may you hit the problem, give a tray to a kernel without CONFIG_IP_ROUTE_MULTIPATH_CACHED. Two months ago i have the same problem, the multipath cached option was

Re: [LARTC] about fw classifier

2006-06-19 Thread Luciano Ruete
El Monday 19 June 2006 23:24, Frank Abel Cancio Bello escribió: Hi all! On http://lartc.org/howto/lartc.adv-filter.html I read that a classifiers available bases the decision on how the firewall has marked the packet and on http://lartc.org/howto/lartc.qdisc.filters.html the following

Re: [LARTC] Multipath Routing Problems

2006-06-26 Thread Luciano Ruete
On Monday 26 June 2006 08:28, Armin ranjbar wrote: On Sun, 25 Jun 2006 21:46:06 +0300 Vladimir Vitkov [EMAIL PROTECTED] wrote: Remove multipath caching and try again if i remove CONFIG_IP_ROUTE_MULTIPATH_CACHED i will be unable to use : CONFIG_IP_ROUTE_MULTIPATH_RR

Re: [LARTC] Unequal Multipath Routing?

2006-06-28 Thread Luciano Ruete
On Wednesday 28 June 2006 05:19, Andrew Lyon wrote: Peter Surda wrote: On Tuesday 27 June 2006 15:16, Luciano Ruete wrote: how about: ip route add default nexthop via a.a.a.a weight 4 nexthop via b.b.b.b weight 3 exactly. Not tested but i think it can work. tested, works

Re: [LARTC] Unequal Multipath Routing?

2006-06-28 Thread Luciano Ruete
On Wednesday 28 June 2006 11:01, Andrew Lyon wrote: Luciano Ruete wrote: On Wednesday 28 June 2006 05:19, Andrew Lyon wrote: Peter Surda wrote: On Tuesday 27 June 2006 15:16, Luciano Ruete wrote: how about: ip route add default nexthop via a.a.a.a weight 4 nexthop via b.b.b.b weight 3

Re: [LARTC] Routed network + web-cache

2006-07-25 Thread Luciano Ruete
On Tuesday 25 July 2006 07:54, Nataniel Klug wrote: Hello all, I have a small ISP and I work all my clients networks over a routed network (now I am using 201.35.16.0/24 and 200.140.222.128/25 for my clients). The gateway server of the ISP is capable of running a web-cache

Re: [LARTC] linux transparent bridge running squid and dansguardian

2006-07-25 Thread Luciano Ruete
On Monday 24 July 2006 16:33, William Bohannan wrote: Thanks or the quick reply. Although I have had no success, I have been trying all day using both physdev and ebtables, neither of which I can get working :( Please help - below is what I am currently using. Try this, it is a one-line

Re: [LARTC] tc and HTB

2006-08-14 Thread Luciano Ruete
El Monday 14 August 2006 18:17, Sim escribió: INET-eth0-Router-eth1-LAN in eth0 egress htb qdisc(you shape uplink here) in eth1 egress htb qdisc(you shape downlink here) this feets perfectly if it is the LAN traffic the one you whant to shape. If it is the traffic from the server

Re: [LARTC] Routing packets over multiple links (NICS) all on the same ISP all with same gateway.

2006-08-16 Thread Luciano Ruete
On Wednesday 16 August 2006 10:11, Jacques Rompen wrote: On 8/14/06, Luciano Ruete [EMAIL PROTECTED] wrote: On Monday 14 August 2006 12:42, Jacques Rompen wrote: Ok ive been trying to get this to work for about half a year now. Ive searched all over the internet for a solution for my

Re: [LARTC] Routing packets over multiple links (NICS) all on the same ISP all with same gateway.

2006-08-16 Thread Luciano Ruete
On Wednesday 16 August 2006 13:03, Luciano Ruete wrote: On Wednesday 16 August 2006 10:11, Jacques Rompen wrote: On 8/14/06, Luciano Ruete [EMAIL PROTECTED] wrote: On Monday 14 August 2006 12:42, Jacques Rompen wrote: Ok ive been trying to get this to work for about half a year now. Ive

Re: [LARTC] Re: Routing packets over multiple links (NICS) all on the same ISP all with same gateway.

2006-08-17 Thread Luciano Ruete
On Thursday 17 August 2006 03:54, Jarek Poplawski wrote: On 16-08-2006 16:18, Jacques Rompen wrote: On 8/16/06, *Jarek Poplawski* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: As far as I know multipath cached should work for routing output of a current box but it's not

Re: [LARTC] Re: Routing packets over multiple links (NICS) all on the same ISP all with same gateway.

2006-08-17 Thread Luciano Ruete
On Thursday 17 August 2006 14:48, Jacques Rompen wrote: On 8/17/06, Luciano Ruete [EMAIL PROTECTED] wrote: if all ethx are on the same switch, you will need: echo 1 /proc/sys/net/ipv4/conf/all/arp_ignore #you can also do it in a per iface basis by default, if you recive an arp request

Re: [LARTC] htb prioritise trafic

2006-08-22 Thread Luciano Ruete
On Tuesday 22 August 2006 02:27, Adorean Alexandru Raul wrote: I have a router with about 300 clients connecting to it. It has htb with a class per client. I wnat to create a script to prioritise www trafic and ssh trafic over p2p trafic this is a sample of what i have now: /sbin/tc

Re: [LARTC] Completely isolating P2P/BitTorrent traffic

2006-09-12 Thread Luciano Ruete
El Tuesday 12 September 2006 11:49, K Venkat escribió: Hi all, I'm tring to isolate P2P traffic, specifically BitTorrent, for my QoS scripts. I can't seem to completely isolate ALL BitTorrent traffic. I identify mark packets and then use tc filters to put them into appropriate classes. My

Re: [LARTC] HTB and per-connection bandwidth allocation

2006-09-14 Thread Luciano Ruete
El Thursday 14 September 2006 05:55, Namitha Rao escribió: Hi http://mailman.ds9a.nl/pipermail/lartc/2002q3/004977.html I have the same problem to discuss as in the above link. I want to allocate say X MBit per individual connection regardless of the number of connection . KIndly could

Re: [LARTC] load balacing with https home banking

2006-12-19 Thread Luciano Ruete
On Monday 11 December 2006 08:15, Marco Berizzi wrote: Hello everybody. I'm running linux 2.6.19 with nth match to alternatively snat outgoing connections to two different ip addresses for load balancing between two adsl lines: Here is: $IPTABLES -t nat -A POSTROUTING -s my_ip --protocol

Re: [LARTC] Load Balancing Problems

2007-01-09 Thread Luciano Ruete
On Friday 05 January 2007 08:33, Alan Romaniuc wrote: Hi, I have a router that got its second link. I was trying to do load balancing, but i can not get it to work properly. Just one link works at time, and is always the second in the command ip route add default table 222 proto static.

Re: [LARTC] Disable netfilter for bridged traffic

2007-01-09 Thread Luciano Ruete
On Saturday 06 January 2007 15:30, Radu Oprisan wrote: senthil wrote: Hi All, Can anybody suggests how can I disable netfilter for bridged traffic in linux-2.4.27 kernel ? If i understand the question, then you just need to ignore the interfaces for the bridge. this is not necesary

[LARTC] filtering in layer 2 [but is not a bridge]

2007-01-09 Thread Luciano Ruete
I have a linux AP with prism2 (hostap) wireless nic. I whant to filter traffic that pass betwen clients of the AP, this is layer 2 traffic (802.11) and netfilter does not sees it, at first i think in physdev target, but is for layer2 bridged interfaces, and this is not the case. There is a way

Re: [LARTC] filtering in layer 2 [but is not a bridge]

2007-01-11 Thread Luciano Ruete
On Tuesday 09 January 2007 11:00, Zoilo Gomez wrote: ebtables from ebtables home page: The ebtables utility enables basic Ethernet frame filtering on a Linux bridge I have _not_ a bridge (that's why i put it in the subject), i have a Linux AP that forward traffic betwen clients at 802.11

Re: [LARTC] 2.6.17 kernels and equalize patch

2007-01-19 Thread Luciano Ruete
On Friday 19 January 2007 08:13, hhoxha wrote: Hi Everybody in the list I have a situation like this --(IP1) linux |eth0.40-- | router || | box| (IP2)|--|Client Router ( Destiantion Net DNET) |eth0.41-- |

Re: [LARTC] Split access, load balancing AND forwarding: HOW?

2007-02-22 Thread Luciano Ruete
On Wednesday 21 February 2007 23:58, Ming-Ching Tiew wrote: From: Luciano Ruete [EMAIL PROTECTED] The solution is to use CONNTRACK from iptables, full example described in this[1] e-mail from the archive. No patches needed. [1] http://mailman.ds9a.nl/pipermail/lartc/2006q2/018964.html

Re: [LARTC] Split access, load balancing AND forwarding: HOW?

2007-02-22 Thread Luciano Ruete
On Thursday 22 February 2007 01:57, Ming-Ching Tiew wrote: From: Ming-Ching Tiew [EMAIL PROTECTED] I would say it would be better to re-order the the iptables command :- #restore mark before ROUTING decision iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark #by-pass rules if

Re: [LARTC] Conntrack table full and Heavy p2p loaded traffic manager ...

2007-02-24 Thread Luciano Ruete
On Friday 23 February 2007 16:28, Sébastien CRAMATTE wrote: Hello I've setuped a bridge with l7-filter and ipp2p. We have every day + or - between 10Mbits and 30 Mbits P2P traffic from + or - 450 customers. When traffic increase. I've got this kind of error message : Feb 23 14:26:19

Re: [LARTC] Conntrack table full and Heavy p2p loaded traffic manager ...

2007-02-27 Thread Luciano Ruete
On Monday 26 February 2007 06:07, you wrote: Hello, cc to the list, it may help others. Thanks for your answer Do you know a method to choose hashSize as you explain me for conntrack max ? Yes, the hash table size(search wikipedia if you do not know what a hash table is) is the numbers

Re: [LARTC] Multiple uplinks, ssh connections hang

2007-02-27 Thread Luciano Ruete
On Monday 26 February 2007 18:43, Korey O'Dell wrote: Folks, Ive got two ISP connections that I am using with: --- ip route add 192.168.200.0/24 dev eth2 src 192.168.200.11 table connection1 ip route add default via 192.168.200.1 table connection1 ip route add x.175.244.0/24 dev eth1 src

Re: [LARTC] Problems getting multipath routes to balance

2007-03-07 Thread Luciano Ruete
On Wednesday 28 February 2007 07:53, Tore Anderson wrote: Hi. I've trying to balance outgoing traffic by using multipath routes, but I can't get it to work. Only one of the routes are used. I'm adding the route like this: ip route add table 101 default \ nexthop via

Re: [LARTC] ipp2p problems

2007-03-15 Thread Luciano Ruete
On Wednesday 14 March 2007 10:45, J.E. wrote: Hello list, I'm newbie in this list. Well, i'm going crazy with ipp2p. Googling i find a mini-howto but i've got problems. 1) Download: * iptables-dev (apt-get) * kernel-headers-2.x.x (your kernel, uname -r) * src of your iptables (iptables -V

Re: [LARTC] Problem

2007-03-17 Thread Luciano Ruete
On Monday 12 March 2007 22:26, Michael Flower wrote: Hello. I am trying to get multi paths running, i.e I want to specify 2 paths from a particular node to another. To test this, I am setting up the following scenario: I create 2 tap devices tap0 = 10.1.1.1/32 netmask 255.255.255.0

[LARTC] [BUG?] ip ru flush RTNETLINK answers: Numerical result out of range

2007-03-18 Thread Luciano Ruete
After an: # ip ru flush I loose all my ip rules but the priority 0 one. [EMAIL PROTECTED]:~# ip ru 0: from all lookup 255 [EMAIL PROTECTED]:~# Ok with that, but now i'm not able to insert any new rule. This leads to a total loose of conectivity. [EMAIL PROTECTED]:~# ip ru add from all

Re: [LARTC] Shape own router

2007-03-22 Thread Luciano Ruete
On Thursday 22 March 2007 22:54, Andy Furniss wrote: Salatiel Filho wrote: Where can i read about IFB ? I try to google but i can not find too much info. maybe i am looking for the wrong words. Maybe this is the solution, cause i would like to put both local traffic and forwarded traffic

Re: [LARTC] IPCLASSIFY - patch based on IPMARK

2007-05-20 Thread Luciano Ruete
On Thursday 17 May 2007 07:56, VladSun wrote: Hello everybody! Some time ago I've decided that using the MARK property of the Linux IP packet structure for the needs of traffic control is not very useful. So I wrote an iptables patch called IPCLASSIFY. It is fully based on IPMARK but it uses

Re: [LARTC] Multihome load balancing - kernel vs netfilter

2007-05-21 Thread Luciano Ruete
On Monday 14 May 2007 02:57, Peter Rabbitson wrote: Hi, I have searched the archives on the topic, and it seems that the list gurus favor load balancing to be done in the kernel as opposed to other means. AFAIKR there aren't conflicting opinions, there are just to different aproaches and i

Re: [LARTC] big problem with HTB/CBQ and CPU for more than 1.700 customers

2007-05-31 Thread Luciano Ruete
On Monday 28 May 2007 10:39:11 VladSun wrote: Alexandru Dragoi написа: u32 hash filters is the key, as somebody pointed. You can also tune your iptables setup, like this #192.168.1.0/24 iptables -t mangle -N 192-168-1-0-24 iptables -t mangle -A FORWARD -s 192.168.1.0/24 -j

[LARTC] htb-gen 9.0beta (htb frontend with web-frontend for home/small/medium ISPs)

2007-05-31 Thread Luciano Ruete
original at: http://www.praga.org.ar/wacko/DevPraga/htbgen Htb-gen has evolved a lot since it release in feb/2006, but i have no time to make a public decent documented and generalized release. But right now i think that is better to put the stuff here, so others can enjoy the notorious

Re: [LARTC] Multihome load balancing - kernel vs netfilter

2007-06-01 Thread Luciano Ruete
On Thursday 31 May 2007 02:02:16 Salim S I wrote: Before we get into the Top-posting stuff, it would be nice if you follow the normal way of replying (or atleast marking a copy) to the list. I think that is the basic idea behind mailing list. Shure! :-), my fault, not looking at headers, my

Re: [LARTC] Multihome load balancing - kernel vs netfilter

2007-06-12 Thread Luciano Ruete
On Tuesday 05 June 2007 03:48:01 Salim S I wrote: -Original Message- From: Luciano Ruete [mailto:[EMAIL PROTECTED] Sent: Saturday, June 02, 2007 11:28 AM To: Salim S I Cc: lartc@mailman.ds9a.nl Subject: Re: [LARTC] Multihome load balancing - kernel vs netfilter Is not about ego

Re: [LARTC] GUI or other tools for traffic shaping

2007-06-14 Thread Luciano Ruete
On Thursday 14 June 2007 06:06:54 Joost Kraaijeveld wrote: Hi, Are there GUI (preferable) or scripting tools available somewhere that can help me with traffic shaping? I have found MasterShaper and tcng but hey seem both unmaintained. Directly writing scripts is still a bit out of my reach,

Re: [LARTC] List fault?

2011-05-05 Thread Luciano Ruete
stumble over this list problem - things like putting in email redirects, put notices on web pages and so on. But such things are just icing on the cake. We should not wait to see whether we can do it. Just move the list, and organise the icing later if we can. -- Luciano Ruete Sequre - Sys Admin