On Wed, Jul 02, 2003 at 12:05:03PM +0200, Daniel Hartmeier wrote:
> On Wed, Jul 02, 2003 at 05:37:35AM -0400, Ray wrote:
> > Running pfctl -vsq several times (with bandwidth at 100Kb) usually
> > yields a qlength of 0, sometimes 1 or 2 or 3.  There are never
> > dropped packets.
> 
> Note that you'd get similar output if you'd queue on the internal
> interface, so make really sure you're queuing on the external one (like,
> unplug the external cable, check ifconfig -a for link status, or
> similar).

Done.

> Also, for this to work, all traffic to the uplink must pass through the
> pf box. If any box can use the uplink without going through pf, it can
> saturate it without pf being able to prioritize. So make sure that the
> pf box is the only one connected to the uplink.

The Internet connection comes from a DSL modem, which is connected
to an old (3.1) firewall, which is connected to the PF bridge, which
is connected to a hub, which connects all other computers.

> Then check the bandwidth setting, I suppose you read the instructions
> about how to pick the right number. Maybe you haven't found the right
> value yet. Try lowering it. You should at least notice that the value is
> limiting your upload speed. If that's not visible, something is wrong.

I've tried lowering it all the way to 50Kb, but still no dropped
packets.  The upload speed is definitely limited, though.  I also
flushed all states and started new downloads and uploads after
loading the ruleset.  No packets seem to go to the priority queue:

queue q_pri priority 7
[ pkts:          0  bytes:          0  dropped pkts:      0 bytes:      0 ]
[ qlength:   0/ 50 ]
[ measured:     0.0 packets/s, 0 b/s ]
queue q_def priq( default )
[ pkts:       3648  bytes:     466638  dropped pkts:      0 bytes:      0 ]
[ qlength:  23/ 50 ]
[ measured:     7.6 packets/s, 52.23Kb/s ]

-Ray-

Reply via email to