Re: altq cripples other connections as well

2011-05-12 Thread Artur Grabowski
On Wed, May 11, 2011 at 3:47 PM, Tom Murphy open...@pertho.net wrote: I had set up ALTQ on a 4.9 firewall box as a box in our network needed its sending throttled, but I noticed that while the firewall was throttling this machine in question, ALL connections going through the machine were

Re: altq cripples other connections as well

2011-05-12 Thread Tom Murphy
Can someone recommend what the qlimit and tbr should be when throttling a connection to just under 100 megabits? One of my concerns is we have an OpenVPN running with UDP. Lots of dropped packets would be rather catastrophic for it. Thanks, Tom

Re: altq cripples other connections as well

2011-05-12 Thread Stuart Henderson
That post is most likely the hotplug PCI-Express ppb problem, I would expect that particular user's problem to be improved by changes to interrupt handling in -current. (and to head off the next question, these changes are not suitable to be backported to stable.) On 2011-05-11, Amit Kulkarni

Re: altq cripples other connections as well

2011-05-12 Thread Martin Pelikan
2011/5/12 Tom Murphy open...@pertho.net: Can someone recommend what the qlimit and tbr should be when throttling a connection to just under 100 megabits? From what I observed, for TCP are the defaults mostly sufficient (if you're not running tests originating at the router). I've never played

Re: altq cripples other connections as well

2011-05-12 Thread Amit Kulkarni
altq on em0 priq bandwidth 95Mb qlimit 8000 queue { bulk, std, mail, ssh, web, vpn, dns, ack } My point in posting that particular misc@ post because it found that tbr is the problem. If you already fiddled with qlimit, it might be affecting tbr size.

Re: altq cripples other connections as well

2011-05-12 Thread Rod Whitworth
On Thu, 12 May 2011 13:10:47 +0200, Martin Pelikan wrote: 2011/5/12 Tom Murphy open...@pertho.net: Can someone recommend what the qlimit and tbr should be when throttling a connection to just under 100 megabits? From what I observed, for TCP are the defaults mostly sufficient (if you're not

altq cripples other connections as well

2011-05-11 Thread Tom Murphy
I had set up ALTQ on a 4.9 firewall box as a box in our network needed its sending throttled, but I noticed that while the firewall was throttling this machine in question, ALL connections going through the machine were adversely affected and slow. Interactive SSH sessions had sometimes 1-2

Re: altq cripples other connections as well

2011-05-11 Thread Stuart Henderson
On 2011-05-11, Tom Murphy open...@pertho.net wrote: I had set up ALTQ on a 4.9 firewall box as a box in our network needed its sending throttled, but I noticed that while the firewall was throttling this machine in question, ALL connections going through the machine were adversely affected and

Re: altq cripples other connections as well

2011-05-11 Thread Amit Kulkarni
On Wed, May 11, 2011 at 8:47 AM, Tom Murphy open...@pertho.net wrote: I had set up ALTQ on a 4.9 firewall box as a box in our network needed its sending throttled, but I noticed that while the firewall was throttling this machine in question, ALL connections going through the machine were

Re: altq cripples other connections as well

2011-05-11 Thread Tom Murphy
Stuart Henderson wrote: Watch 'systat q' or 'pfctl -vvsq' and check that packets are being assigned to the expected queues.. I get this (sorry for the wonky formatting): QUEUE BW SCH PRIO PKTSBYTES DROP_P DROP_B QLEN BORROW SUSPEN P/S B/S bulk