On Tue, 2011-10-11 at 10:31 +0200, Simon Matter wrote:
> Hi,
> 
> I've just realized that something seems to be wrong with traffic shaping
> on two systems which were running RHEL4 and are now running RHEL6. While
> trying to find what is wrong I even simplified the config but it just
> doesn't seem to work as it has with EL4. The test config looks like this
> (eth2 is the "internet" interface):
> 
> in shorewall.conf I have:
> TC_ENABLED=Internal
> 
> tcdevices:
> #NUMBER:        IN-BANDWITH     OUT-BANDWIDTH   OPTIONS         REDIRECTED
> #INTERFACE                                                      INTERFACES
> eth2            20000kbit       2000kbit
> 
> tcclasses:
> #INTERFACE:CLASS        MARK    RATE:           CEIL    PRIORITY       
> OPTIONS
> #                               DMAX:UMAX
> eth2            1       full/4  full            1      
> tcp-ack,tos-minimize-delay
> eth2            2       full/4  full            2       default
> eth2            3       full/8  full*8/10       2
> 
> 
> Now, on the completely idle link I can do what I want, downloading http or
> doing rsync via ssh, I get download speeds of 200-500 kB/s. Setting
> TC_ENABLED=No immediately increases the downstream to its full speed.
> 
> Looks like I'm missing the obvious, but what is it?
> The output of "shorewall show tc eth2" is attached.

You might try this suggestion from the Shorewall TC HOWTO:

        Note
        
        For fast lines, the actually download speed may be well below
        what you specify here. If you have this problem, then follow the
        bandwidth with a ":" and a burst size. The default burst is
        10kb, but on my 50mbit line, I specify 200kb. (50mbit:200kb).

-tOM
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to