alex wrote:
>> Tom Eastep wrote:
>> After testing this some more, I don't believe it's ready to try yet. Use
>> at your own risk.
> 
>    Hello Tom!
>    My congratulations! But what is the problem? Do you think it can be 
> solved
> (after some investigations, experiments and tests) or this is principal 
> thing
> that don't suit for us (may be in current time while)?

It's hard to say. The problem that I'm having is that when a flow filter
is applied to an SFQ qdisc, the qdisc will eventually start dropping
more and more packets until no traffic flows at all!

Try this experiment on a non-critical Linux box:

   tc qdisc add dev eth0 root handle 1: sfq quantum 1514 limit 127
   tc filter add dev eth0 protocol ip pref 1 parent 1: handle 1 flow
hash keys src,dst,proto-src divisor 1024

That should in theory be the same filter that gets applied by default.
Use the box a while and see what happens (YMMV).

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to