[Shorewall-users] Inbound and outbound traffic shaping and prioritizing on 5.1.5.2

2017-08-26 Thread Roel de Wildt 
Hello,

I'm trying to configure the inbound and outbound traffic shaping on
shorewall 5.1.5.2.

The problem is that if I specify the interface in tcdevices with both the
IN_BANDWITH and OUT_BANDWIDTH, the internet speed drops to 1mbit while I
have specified 300mbit and 28mbit.

If I only specify the OUT_BANDWIDTH it just works fine.

What could be the cause of this?

If I do a shorewall show tc it does not show the specified IN_BANDWIDTH at
all.

The settings I have done in the tcdevices are:

#
# Shorewall -- /etc/shorewall/tcdevices
#
# For information about entries in this file, type "man shorewall-tcdevices"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
#
###
#INTERFACE  IN_BANDWITH OUT_BANDWIDTH   OPTIONS REDIRECT
1:ens161-   28mbit
2:ens256-   14mbit

My tcclasses file:

#
# Shorewall -- /etc/shorewall/tcclasses
#
# For information about entries in this file, type "man shorewall-tcclasses"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
#
###
#INTERFACE  MARKRATECEILPRIOOPTIONS
1:2 12  full/4  full1
tcp-ack,tos-minimize-delay
1:3 13  full/4  full2
1:4 14  full/4  full3   default
1:5 15  full/4  full4
#
2:2 22  full/4  full1
tcp-ack,tos-minimize-delay
2:3 23  full/4  full2
2:4 24  full/4  full3   default
2:5 25  full/4  full4
#

My tcfilters files:

#
# Shorewall -- /etc/shorewall/tcfilters
#
# For information about entries in this file, type "man shorewall-tcfilters"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
#
##
#CLASS  SOURCE  DESTPROTO   DPORT   SPORT   TOS
LENGTH
1:4 -   192.168.179.1
1:2 -   192.168.179.1   icmp
 echo-request,echo-reply
1:2 -   192.168.179.1   udp,tcp domain
1:3 -   192.168.179.1   tcp www,https
1:5 -   192.168.179.1   tcp 119,563
#
2:4 -   192.168.178.1
2:2 -   192.168.178.1   icmp
 echo-request,echo-reply
2:2 -   192.168.178.1   udp,tcp domain
2:3 -   192.168.178.1   tcp www,https
2:5 -   192.168.178.1   tcp 119,563
#


Kind regards,
Roel de Wildt
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Re: [Shorewall-users] Inbound and outbound traffic shaping and prioritizing on 5.1.5.2

2017-08-26 Thread Tom Eastep 
On 08/26/2017 01:11 AM, Roel de Wildt wrote:
> Hello,
> 
> I'm trying to configure the inbound and outbound traffic shaping on
> shorewall 5.1.5.2.
> 
> The problem is that if I specify the interface in tcdevices with both
> the IN_BANDWITH and OUT_BANDWIDTH, the internet speed drops to 1mbit
> while I have specified 300mbit and 28mbit.
> 
> If I only specify the OUT_BANDWIDTH it just works fine.
> 
> What could be the cause of this?
> 
> If I do a shorewall show tc it does not show the specified IN_BANDWIDTH
> at all.
> 
> The settings I have done in the tcdevices are:
> 
> #
> # Shorewall -- /etc/shorewall/tcdevices
> #
> # For information about entries in this file, type "man shorewall-tcdevices"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ###
> #INTERFACE  IN_BANDWITH OUT_BANDWIDTH   OPTIONS REDIRECT
> 1:ens161-   28mbit
> 2:ens256-   14mbit
> 
> My tcclasses file:
> 
> #
> # Shorewall -- /etc/shorewall/tcclasses
> #
> # For information about entries in this file, type "man shorewall-tcclasses"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ###
> #INTERFACE  MARKRATECEILPRIOOPTIONS
> 1:2 12  full/4  full1  
> tcp-ack,tos-minimize-delay
> 1:3 13  full/4  full2
> 1:4 14  full/4  full3   default
> 1:5 15  full/4  full4
> #
> 2:2 22  full/4  full1  
> tcp-ack,tos-minimize-delay
> 2:3 23  full/4  full2
> 2:4 24  full/4  full3   default
> 2:5 25  full/4  full4
> #
> 
> My tcfilters files:
> 
> #
> # Shorewall -- /etc/shorewall/tcfilters
> #
> # For information about entries in this file, type "man shorewall-tcfilters"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ##
> #CLASS  SOURCE  DESTPROTO   DPORT   SPORT  
> TOS LENGTH
> 1:4 -   192.168.179.1
> 1:2 -   192.168.179.1   icmp  
>  echo-request,echo-reply
> 1:2 -   192.168.179.1   udp,tcp domain
> 1:3 -   192.168.179.1   tcp www,https
> 1:5 -   192.168.179.1   tcp 119,563
> #
> 2:4 -   192.168.178.1
> 2:2 -   192.168.178.1   icmp  
>  echo-request,echo-reply
> 2:2 -   192.168.178.1   udp,tcp domain
> 2:3 -   192.168.178.1   tcp www,https
> 2:5 -   192.168.178.1   tcp 119,563
> #
> 

Please see FAQs 97 and 97a.

-Tom
-- 
Tom Eastep\   Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
  \___



signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Re: [Shorewall-users] Inbound and outbound traffic shaping and prioritizing on 5.1.5.2

2017-08-26 Thread Roel de Wildt 
Hi Tom,

FAQ 97a did solve the problem.

Thank you

Kind regards,
Roel de Wildt



2017-08-26 16:18 GMT+02:00 Tom Eastep :

> On 08/26/2017 01:11 AM, Roel de Wildt wrote:
> > Hello,
> >
> > I'm trying to configure the inbound and outbound traffic shaping on
> > shorewall 5.1.5.2.
> >
> > The problem is that if I specify the interface in tcdevices with both
> > the IN_BANDWITH and OUT_BANDWIDTH, the internet speed drops to 1mbit
> > while I have specified 300mbit and 28mbit.
> >
> > If I only specify the OUT_BANDWIDTH it just works fine.
> >
> > What could be the cause of this?
> >
> > If I do a shorewall show tc it does not show the specified IN_BANDWIDTH
> > at all.
> >
> > The settings I have done in the tcdevices are:
> >
> > #
> > # Shorewall -- /etc/shorewall/tcdevices
> > #
> > # For information about entries in this file, type "man
> shorewall-tcdevices"
> > #
> > # See http://shorewall.net/traffic_shaping.htm for additional
> information.
> > #
> > 
> ###
> > #INTERFACE  IN_BANDWITH OUT_BANDWIDTH   OPTIONS REDIRECT
> > 1:ens161-   28mbit
> > 2:ens256-   14mbit
> >
> > My tcclasses file:
> >
> > #
> > # Shorewall -- /etc/shorewall/tcclasses
> > #
> > # For information about entries in this file, type "man
> shorewall-tcclasses"
> > #
> > # See http://shorewall.net/traffic_shaping.htm for additional
> information.
> > #
> > 
> ###
> > #INTERFACE  MARKRATECEILPRIOOPTIONS
> > 1:2 12  full/4  full1
> > tcp-ack,tos-minimize-delay
> > 1:3 13  full/4  full2
> > 1:4 14  full/4  full3   default
> > 1:5 15  full/4  full4
> > #
> > 2:2 22  full/4  full1
> > tcp-ack,tos-minimize-delay
> > 2:3 23  full/4  full2
> > 2:4 24  full/4  full3   default
> > 2:5 25  full/4  full4
> > #
> >
> > My tcfilters files:
> >
> > #
> > # Shorewall -- /etc/shorewall/tcfilters
> > #
> > # For information about entries in this file, type "man
> shorewall-tcfilters"
> > #
> > # See http://shorewall.net/traffic_shaping.htm for additional
> information.
> > #
> > 
> ##
> > #CLASS  SOURCE  DESTPROTO   DPORT   SPORT
> > TOS LENGTH
> > 1:4 -   192.168.179.1
> > 1:2 -   192.168.179.1   icmp
> >  echo-request,echo-reply
> > 1:2 -   192.168.179.1   udp,tcp domain
> > 1:3 -   192.168.179.1   tcp www,https
> > 1:5 -   192.168.179.1   tcp 119,563
> > #
> > 2:4 -   192.168.178.1
> > 2:2 -   192.168.178.1   icmp
> >  echo-request,echo-reply
> > 2:2 -   192.168.178.1   udp,tcp domain
> > 2:3 -   192.168.178.1   tcp www,https
> > 2:5 -   192.168.178.1   tcp 119,563
> > #
> >
>
> Please see FAQs 97 and 97a.
>
> -Tom
> --
> Tom Eastep\   Q: What do you get when you cross a mobster with
> Shoreline, \ an international standard?
> Washington, USA \ A: Someone who makes you an offer you can't
> http://shorewall.org \   understand
>   \___
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users