Limit downloading using the new queueing subsystem (OpenBSD-5.4)

2013-10-15 Thread Wesley MOUEDINE ASSABY
Hi, I built this small network: 192.168.1.0/29axe0-obsd54-re0---WAN I want to limit a host (192.168.1.1/29) to download at 10KBps. The pf ruleset is loaded. I can see the queue employee used but download is still high, not limited at 10 KBps. # pfctl -vvs queue [ pkts: 0

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Wesley MOUEDINE ASSABY
When i download a file using the host 192.168.1.1 and do at the same time : # pfctl -vvs queue queue restriction on axe0 bandwidth 800K qlimit 50 [ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ] [ qlength: 0/ 50 ] [ measured: 0.0 packets/s, 0 b/s ] queue

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Norman Golisz
On Tue Oct 15 2013 15:48, Wesley MOUEDINE ASSABY wrote: When i download a file using the host 192.168.1.1 and do at the same time : # pfctl -vvs queue queue restriction on axe0 bandwidth 800K qlimit 50 [ pkts: 0 bytes: 0 dropped pkts: 0 bytes: 0 ] [ qlength:

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Norman Golisz
On Tue Oct 15 2013 14:08, Norman Golisz wrote: On Tue Oct 15 2013 15:48, Wesley MOUEDINE ASSABY wrote: When i download a file using the host 192.168.1.1 and do at the same time : # pfctl -vvs queue queue restriction on axe0 bandwidth 800K qlimit 50 [ pkts: 0 bytes:

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Wesley MOUEDINE ASSABY
Le 2013-10-15 16:18, Norman Golisz a écrit : On Tue Oct 15 2013 14:08, Norman Golisz wrote: On Tue Oct 15 2013 15:48, Wesley MOUEDINE ASSABY wrote: When i download a file using the host 192.168.1.1 and do at the same time : # pfctl -vvs queue queue restriction on axe0 bandwidth 800K

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread andy
Only scanned your email but try removing the IN. The rule I always remember is; When the SYN packet ingresses the interface state will be created with the queue tag if a rule matches and states to do so, as subsequent packets egress an interface if their is a matching state with a queue name

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Norman Golisz
On Tue Oct 15 2013 16:32, Wesley MOUEDINE ASSABY wrote: Le 2013-10-15 16:18, Norman Golisz a écrit : On Tue Oct 15 2013 14:08, Norman Golisz wrote: On Tue Oct 15 2013 15:48, Wesley MOUEDINE ASSABY wrote: When i download a file using the host 192.168.1.1 and do at the same time : # pfctl

Re: Limit downloading using the new queueing subsystem (OpenBSD 5.4-current)

2013-10-15 Thread Wesley MOUEDINE ASSABY
Le 2013-10-15 20:48, Norman Golisz a écrit : Yes, I remember you need to explicitly set a maximum bandwidth to the queue definition: queue employee parent restriction bandwidth 10K max 10K Does this work for you? Yes, i just added max keyword. Therefore i meet a problem : queue restriction