Tom Did more tests. All tests except for throughput are via vpn. Did tests while copying a server install from one site to another. Doing copying through vpn Both have a t1 line at 1500kb. with the tcdevices limits set very high get 1520kb.sec Measured throughput with iptraf. Ping time is mostly over 500ms.
One at a time cut back in tcdevices both incoming and outgoing. Rate always dropped to what it was set to. Here is the interesting part. If I rate limited outgoing ping times were bad. over 500ms If I rate limited incoming rates are very good. ~20ms Also noticed that when ping times are very bad between these 2 sites ping times to other sites via openvpn are OK. This is true from either site. Wild speculation is that excessive amount of packets are in the outgoing openvpn queue and do not harm other links. Based on that I tried txqueuelen to 20 from the default 100 on the outgoing sides openvpn setup and it seems to help a bit. My knowledge of the details of networking are limited. If the it runs out of transmit does it just wait? I wonder how low one can safely set it. John On Saturday 10 July 2010 05:59:12 pm Tom Eastep wrote: > On 7/10/10 1:33 PM, Tom Eastep wrote: > > On 7/10/10 1:10 PM, John McMonagle wrote: > >> Attached is a dump with heavy trafic and some opennms graphs of the same > >> site. eth0 is local net. > >> eth1 is internet. > > > > There is still very little traffic going through the qdiscs and no > > queuing. Please forward your Shorewall TC configuration on this box. > > Don't bother. > > I've taken another look at this and there is, indeed, quite a bit of > incoming traffic (right below the OUT-BANDWIDTH on ifb0). But none of > the classes is being driven to the point where queuing is occurring; > that most likely means that queuing is happening at the up-stream > router. Try dropping the OUT-BANDWIDTH of ifb0 by 10-20% and see if that > helps or hurts. > > If it doesn't help, then I would try dropping the IN-BANDWIDTH of eth1 > by a similar amount. > > -Tom ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
