John McMonagle wrote: > Have Shorewall 4.2 rc3 running with ifb and looks good so far. > > voip is running much better. > > Want to make sure I really have it right so have a few questions. > > Running ipsec. Will the ifb device packets still be ipsec? > Using native 2.6 kernel ipsec if it matters. > I suspect they will be in ipsec so I'll have to set tos.
Yes -- packets will still be encapsulated. > > in http://www.shorewall.net/traffic_shaping.htm#IFB > > |/etc/shorewall/init|: > > qt modprobe ifb numifbs=1 > qt ip link set dev ifb0 up > > What is qt? qt is a function in the Shorewall base library (/usr/share/shorewall/lib.base). 'qt' stands for 'quite' which means that the function runs a program and sends all output (STDOUT & STDERR) to /dev/null. > > in > > |/etc/shorewall/tcclasses|: > > #INTERFACE MARK RATE CEIL PRIORITY OPTIONS > 1:110 - 5*full/10 full 1 tcp-ack,tos-minimize-delay > 1:120 - 2*full/10 6*full/10 2 default > 1:130 - 2*full/10 6*full/10 3 > 2:110 - 5*full/10 full 1 tcp-ack,tos-minimize-delay > 2:120 - 2*full/10 6*full/10 2 default > 2:130 - 2*full/10 6*full/10 3 > > |Do the class numbers such as 110 have any particular significance? > Any documentation for this? They have no significance. > | > > |Is there any way to tell what queue or class a particular packet is > being put in? No. The output of "shorewall show tc" will show packet (and byte) counts only. -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
