Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Ivan Pepelnjak
 I have crafted and applied some rules which I thought would 
 prioritize traffic from an 871w (via ADSL) to one specific 
 host. The idea is that any traffic destined to this host 
 should be prioritized over all other traffic.

What is your upstream connection? If you're using PPPoE, you won't be able
to do any output queuing, as the outbound LAN interface is never saturated
(the bottleneck is experienced by the DSL modem).

Ivan

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Ivan Pepelnjak
Exactly true ... That would be my next answer :)

However, the problem is that it's somewhat hard to estimate what the shaping
bandwidth should be in DSL environments (you have the cell tax on top of
PPPoE plus unknown amount of oversubscription in the SP network) if you want
to squeeze as much out of the DSL line as possible.

Best regards
Ivan

 -Original Message-
 From: Tim Franklin [mailto:t...@pelican.org] 
 Sent: Tuesday, March 24, 2009 1:57 PM
 To: Ivan Pepelnjak
 Cc: 'John Lange'; 'Cisco NSP'
 Subject: Re: [c-nsp] Needs some help with QOS
 
 On Tue, March 24, 2009 12:12 pm, Ivan Pepelnjak wrote:
 
  What is your upstream connection? If you're using PPPoE, 
 you won't be 
  able to do any output queuing, as the outbound LAN 
 interface is never 
  saturated (the bottleneck is experienced by the DSL modem).
 
 If you know what your upstream bandwidth is, you can wrap a 
 shaper around the queueing policy to provide the 
 back-pressure.  Useful for all sorts of 'ethernet hand-off' 
 type services where the circuit provider has some other 
 device upstream of your router.
 
 Regards,
 Tim.
 
 
 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread BALLA Attila

Hi,

  you should use hierarchical QoS. First of all you should shape the 
output traffic down to the upstream speed, then you can use the llq inside 
the shaped class:

http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800b2d29.shtml

BR, A.

On Tue, 24 Mar 2009, Ivan Pepelnjak wrote:


I have crafted and applied some rules which I thought would
prioritize traffic from an 871w (via ADSL) to one specific
host. The idea is that any traffic destined to this host
should be prioritized over all other traffic.


What is your upstream connection? If you're using PPPoE, you won't be able
to do any output queuing, as the outbound LAN interface is never saturated
(the bottleneck is experienced by the DSL modem).

Ivan

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Tim Franklin
On Tue, March 24, 2009 12:12 pm, Ivan Pepelnjak wrote:

 What is your upstream connection? If you're using PPPoE, you won't be able
 to do any output queuing, as the outbound LAN interface is never saturated
 (the bottleneck is experienced by the DSL modem).

If you know what your upstream bandwidth is, you can wrap a shaper around
the queueing policy to provide the back-pressure.  Useful for all sorts of
'ethernet hand-off' type services where the circuit provider has some
other device upstream of your router.

Regards,
Tim.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread John Lange
First, thanks to those who pointed out my (should have been obvious)
error where I named the access-list qos1 but then tried to reference it
with al-qos1. When you're looking for a big problem it's easy to
overlook the obvious.

On Tue, 2009-03-24 at 12:56 +, Tim Franklin wrote:
 On Tue, March 24, 2009 12:12 pm, Ivan Pepelnjak wrote:
 
  What is your upstream connection? If you're using PPPoE, you won't be able
  to do any output queuing, as the outbound LAN interface is never saturated
  (the bottleneck is experienced by the DSL modem).
 
 If you know what your upstream bandwidth is, you can wrap a shaper around
 the queueing policy to provide the back-pressure.  Useful for all sorts of
 'ethernet hand-off' type services where the circuit provider has some
 other device upstream of your router.

Ok, that also seems to be the point of this link which was provided in
another response.

 http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800b2d29.shtml

Basically, the virtual interfaces do not implement the back-pressure
algorithm necessary to signal that excess packets should be queued by
the Layer 3 (L3) queueing system.

Ok, so I'm going to have to implement a new solution based on that
document.

So just a final question, would the solution have worked if it was on a
regular interface? I just want to make sure I had the right idea.

Regards,
- 
John Lange
http://www.johnlange.ca



___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Ivan Pepelnjak
 http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note0918
  6a00800b2d29.shtml
 
 Basically, the virtual interfaces do not implement the 
 back-pressure algorithm necessary to signal that excess 
 packets should be queued by the Layer 3 (L3) queueing system.
 
 Ok, so I'm going to have to implement a new solution based on 
 that document.
 
 So just a final question, would the solution have worked if 
 it was on a regular interface? I just want to make sure I had 
 the right idea.

Yes, assuming that your outgoing interface is the bottleneck. For example,
if you have a point-to-point uplink, it's usually the bottleneck and the
queuing works as expected. But if you have a Fast Ethernet link into the SP
network which polices you @ 2 Mbps, the output queue will never form at your
output FE interface. Yet again, you'll have to configure shaping to
introduce an artificial bottleneck.

Ivan
 
http://www.ioshints.info/about
http://blog.ioshints.info/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Per Carlson
Hi.

 So just a final question, would the solution have worked if it was on a
 regular interface? I just want to make sure I had the right idea.

Yes, in this case the ATM-interface where the PVC lives. But the PVC
must be something else than the default ubr class of service. The U
in UBR stands for Unspecified, i.e. no QoS. Try vbr-nrt instead.

-- 
Pelle
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread John Lange
On Tue, 2009-03-24 at 13:29 +0100, BALLA Attila wrote:
 Hi,
 
you should use hierarchical QoS. First of all you should shape the 
 output traffic down to the upstream speed, then you can use the llq inside 
 the shaped class:
 http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800b2d29.shtml
 

I followed the examples on that page but I'm not having any luck. As far
as I can tell the queue is dropping at least some packets that it should
be prioritizing (look for 582 below).

First, here is what i have in my config, and below that is the results
of show policy-map interface. As a side question, the file copy now
seems to work much differently in that it does a big burst at the
start of the copy and then stalls. Is this a burst while the packet
queue fills up?

--- config ---

class-map match-all cm-qos1
 match access-group name al-qos1

policy-map parent_shaping
 class class-default
  shape average 128000
  service-policy child_queueing

policy-map child_queueing
 class cm-qos1
  priority percent 70

interface FastEthernet4
 service-policy output parent_shaping

ip access-list extended al-qos1
 permit ip host xxx.xxx.xxx.xxx any
 permit ip any host xxx.xxx.xxx.xxx

-

l#show policy-map interface 
 FastEthernet4 

Service-policy output: parent_shaping

 Class-map: class-default (match-any)
  157430 packets, 69675635 bytes
  5 minute offered rate 15 bps, drop rate 25000 bps
  Match: any 
  Queueing
  queue limit 64 packets
  (queue depth/total drops/no-buffer drops) 47/618/0
  (pkts output/bytes output) 15633/18270484
  shape (average) cir 128000, bc 512, be 512
  target shape rate 128000

   Service-policy : child_queueing

queue stats for all priority classes:
 Queueing
 queue limit 64 packets
 (queue depth/total drops/no-buffer drops) 0/582/0
 (pkts output/bytes output) 3228/2120973

 Class-map: cm-qos1 (match-all)
  3810 packets, 2978841 bytes
  5 minute offered rate 71000 bps, drop rate 25000 bps
  Match: access-group name al-qos1
  Priority: 70% (89 kbps), burst bytes 2200, b/w exceed drops: 582
  

 Class-map: class-default (match-any)
  12441 packets, 16201283 bytes
  5 minute offered rate 69000 bps, drop rate 0 bps
  Match: any 
  
  queue limit 64 packets
  (queue depth/total drops/no-buffer drops) 46/36/0
  (pkts output/bytes output) 12405/16149511


- 
John Lange
http://www.johnlange.ca


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Peter Rathlev
On Tue, 2009-03-24 at 14:39 -0500, John Lange wrote:
 I followed the examples on that page but I'm not having any luck. As
 far as I can tell the queue is dropping at least some packets that it
 should be prioritizing (look for 582 below).
...
 policy-map parent_shaping
  class class-default
   shape average 128000
   service-policy child_queueing
 
 policy-map child_queueing
  class cm-qos1
   priority percent 70
 
 interface FastEthernet4
  service-policy output parent_shaping
...
  Class-map: cm-qos1 (match-all)
   3810 packets, 2978841 bytes
   5 minute offered rate 71000 bps, drop rate 25000 bps
   Match: access-group name al-qos1
   Priority: 70% (89 kbps), burst bytes 2200, b/w exceed drops: 582

You only give priority to 89kbps, so if you try to force more traffic
through, the excess will of course be dropped when others use the
remaining bandwidth. The 5 minute offered rate can never exceed the
configured rate, but it can easily land below. Or did you push traffic
through for more than five minutes?

Maybe the burst allowed in the shaping combined with a harder (less
buffered) limit on the WAN interface drops more packets than necessary?

 As a side question, the file copy now
 seems to work much differently in that it does a big burst at the
 start of the copy and then stalls. Is this a burst while the packet
 queue fills up?

Hmm... TCP should take care of finding the correct level. Is the stall
permanent, i.e. the connection is dropped? Or does it just take a long
break and then resume?

You could try playing with the burst size definitions with priority
percent 70 burst-size. Default is 200 ms of burst, but that may not
suit the purpose. You could try lowering it a little and see if this
works better.

Regards,
Peter


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-24 Thread Per Carlson
Hi.

Which direction are you trying to prioritize? In the first post the
policy were on the Dialer0-interface (traffic from LAN towards DSL),
but in the last post it's on the Fa4-interface (traffic from DSL
towards LAN).

I assume it's the first one because there is less point shaping when
going from slow to fast interfaces. It also fit's better with the 128k
cap in the shaper. But as Peter sort of pointed out, 70% out of 128k
isn't much...

-- 
Pelle
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Needs some help with QOS

2009-03-23 Thread Wouter Prins
Hi John,

==match access-group name al-qos1==
That acl doesnt exist?
Also for DSL, use some appropiate bandwidht values:

 bandwidth xxx
 bandwidth receive yyy

Use the show policy-map interface dialer 0 to see if the matching works

Regards,
Wouter

2009/3/23 John Lange j...@johnlange.ca

 I have crafted and applied some rules which I thought would prioritize
 traffic from an 871w (via ADSL) to one specific host. The idea is that
 any traffic destined to this host should be prioritized over all other
 traffic.

 Unfortunately my test show absolutely no effect. If I upload a couple of
 files at the same time, the one with QOS enabled doesn't seem to get any
 priority.

 I have two questions:

 1) What is wrong with my config? (below)

 2) How can I get real-time debugging of the QOS without flooding my
 console?

 --- config 

 class-map match-all cm-qos1
  match access-group name al-qos1

 policy-map pm-qos1
  class cm-qos1
  priority percent 70

 interface Dialer0
  bandwidth 200
  ip address negotiated
  ip mtu 1452
  ip nat outside
  ip virtual-reassembly
  zone-member security out-zone
  encapsulation ppp
  dialer pool 1
  dialer-group 1
  ppp authentication chap callin
  ppp chap hostname x...@xxx
  ppp chap password 7 xx
  service-policy output pm-qos1

 ip access-list extended qos1
  permit ip host XXX.XXX.XXX.XXX any
  permit ip any host XXX.XXX.XXX.XXX



 --
 John Lange
 http://www.johnlange.ca


 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




-- 
Wouter Prins
w...@null0.nl
0x301FA912
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/