Hi,
I've just realized that something seems to be wrong with traffic shaping
on two systems which were running RHEL4 and are now running RHEL6. While
trying to find what is wrong I even simplified the config but it just
doesn't seem to work as it has with EL4. The test config looks like this
(eth2 is the "internet" interface):
in shorewall.conf I have:
TC_ENABLED=Internal
tcdevices:
#NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED
#INTERFACE INTERFACES
eth2 20000kbit 2000kbit
tcclasses:
#INTERFACE:CLASS MARK RATE: CEIL PRIORITY
OPTIONS
# DMAX:UMAX
eth2 1 full/4 full 1
tcp-ack,tos-minimize-delay
eth2 2 full/4 full 2 default
eth2 3 full/8 full*8/10 2
Now, on the completely idle link I can do what I want, downloading http or
doing rsync via ssh, I get download speeds of 200-500 kB/s. Setting
TC_ENABLED=No immediately increases the downstream to its full speed.
Looks like I'm missing the obvious, but what is it?
The output of "shorewall show tc eth2" is attached.
Thanks for any ideas!
Regards,
Simon
Shorewall 4.4.24 Traffic Control at test.corp.invoca.ch - Tue Oct 11 10:27:56
CEST 2011
Device eth2:
qdisc htb 1: root refcnt 9 r2q 10 default 12 direct_packets_stat 0 ver 3.17
Sent 4882775 bytes 65340 pkt (dropped 0, overlimits 65 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
qdisc sfq 2: parent 1:11 limit 127p quantum 6250b flows 127/1024 perturb 10sec
Sent 3150232 bytes 45496 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
qdisc sfq 3: parent 1:12 limit 127p quantum 6250b flows 127/1024 perturb 10sec
Sent 1732543 bytes 19824 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
qdisc sfq 4: parent 1:13 limit 127p quantum 3125b flows 127/1024 perturb 10sec
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
qdisc ingress ffff: parent ffff:fff1 ----------------
Sent 108758969 bytes 108386 pkt (dropped 4263, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
class htb 1:11 parent 1:1 leaf 2: prio 1 quantum 6250 rate 500000bit ceil
2000Kbit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b
level 0
Sent 3150232 bytes 45496 pkt (dropped 0, overlimits 0 requeues 0)
rate 38200bit 70pps backlog 0b 0p requeues 0
lended: 45496 borrowed: 0 giants: 0
tokens: 382000 ctokens: 95500
class htb 1:1 root rate 2000Kbit ceil 2000Kbit burst 1600b/8 mpu 0b overhead 0b
cburst 1600b/8 mpu 0b overhead 0b level 7
Sent 4882775 bytes 65340 pkt (dropped 0, overlimits 0 requeues 0)
rate 62200bit 100pps backlog 0b 0p requeues 0
lended: 56 borrowed: 0 giants: 0
tokens: 95000 ctokens: 95000
class htb 1:13 parent 1:1 leaf 4: prio 2 quantum 3125 rate 250000bit ceil
1600Kbit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b
level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 800000 ctokens: 125000
class htb 1:12 parent 1:1 leaf 3: prio 2 quantum 6250 rate 500000bit ceil
2000Kbit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b
level 0
Sent 1732543 bytes 19844 pkt (dropped 0, overlimits 0 requeues 0)
rate 24000bit 30pps backlog 0b 0p requeues 0
lended: 19768 borrowed: 56 giants: 0
tokens: 380000 ctokens: 95000
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
