Tom Eastep wrote: > alex wrote: >>> Tom Eastep wrote: >>> After testing this some more, I don't believe it's ready to try yet. Use >>> at your own risk. >> Hello Tom! >> My congratulations! But what is the problem? Do you think it can be >> solved >> (after some investigations, experiments and tests) or this is principal >> thing >> that don't suit for us (may be in current time while)? > > It's hard to say. The problem that I'm having is that when a flow filter > is applied to an SFQ qdisc, the qdisc will eventually start dropping > more and more packets until no traffic flows at all! > > Try this experiment on a non-critical Linux box: > > tc qdisc add dev eth0 root handle 1: sfq quantum 1514 limit 127 > tc filter add dev eth0 protocol ip pref 1 parent 1: handle 1 flow > hash keys src,dst,proto-src divisor 1024 > > That should in theory be the same filter that gets applied by default. > Use the box a while and see what happens (YMMV).
BTW - In my experiments, adding perturbation doesn't help (e.g., 'perturb 10' at the end of the 'qdisc add' command). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
