I have checked through previous posts and followed the shorewall
documentation, and I cannot seem to get TC to work in the way that I am
familiar with in migrating to 4.6.x.
To set the stage, I will provide my basic configuration and the output
(as well as what I was expecting).
My tcdevices looks like this:
###############################################################################
#NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED
#INTERFACE INTERFACES
bond0 0 41mbit
Then my tcclasses looks like this:
###############################################################################
#INTERFACE:CLASS MARK RATE: CEIL PRIORITY
OPTIONS
# DMAX:UMAX
bond0 1 9216kbit 10240kbit 2
default
# to the user
bond0 2 9216kbit 10240kbit 1
I had a tcrules from my old installation, and it looked like this:
###############################################################################
#MARK SOURCE DEST PROTO PORT(S) CLIENT USER TEST
# PORT(S)
# From Home - default
1 172.16.125.59,172.16.125.60 208.5.23.17
all
# to the user
2 172.16.125.59,172.16.125.60 155.172.8.23
all
When I fire it up, I see that I should run the update to make the mangle
file, which I do, and I end up with a mangle that looks like this:
MARK(1) 172.16.125.59,172.16.125.60 208.5.23.17 all
MARK(2) 172.16.125.59,172.16.125.60 155.172.8.23 all
So, where the issue lies is when I do a "shorewall show tc":
----------cut here from show tc-----------------
. . . . .
Chain tcpre (1 references)
pkts bytes target prot opt in out source
destination
1178 3965K MARK all -- * * 172.16.125.59
208.5.23.17 MARK set 0x1
11415 32M MARK all -- * * 172.16.125.59
155.172.8.23 MARK set 0x2
. . . .
class htb 1:11 parent 1:1 leaf 2: prio 2 quantum 5619 rate 9216Kbit ceil
10240Kbit burst 1597b/1 mpu 0b overhead 0b cburst 1598b/1 mpu 0b
overhead 0b level 0
Sent 37531046 bytes 31611 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 113p requeues 0
lended: 11746 borrowed: 1468 giants: 0
tokens: -23782 ctokens: -36935
class htb 1:1 root rate 41000Kbit ceil 41000Kbit burst 1599b/1 mpu 0b
overhead 0b cburst 1599b/1 mpu 0b overhead 0b level 7
Sent 37531046 bytes 31611 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 1468 borrowed: 0 giants: 0
tokens: -4357 ctokens: -4357
class htb 1:12 parent 1:1 leaf 3: prio 1 quantum 5619 rate 9216Kbit ceil
10240Kbit burst 1597b/1 mpu 0b overhead 0b cburst 1598b/1 mpu 0b
overhead 0b level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 21687 ctokens: 19531
----------cut here from show tc-----------------
First of all, the rate for 1:11 should not ever be 0 - there is always
data flowing. And 1:12 never shows anything. I am sure I am missing
something here, but I had used this tool in the past to make sure the
classes I defined were actually confined to the pipe size. I still have
the old firewall up and running, and on the exact same setup, I see a
lot more information for the classes:
----------cut here from show tc on old firewall -------------
class htb 1:11 parent 1:1 leaf 11: prio 3 quantum 18432 rate 1536Kbit
ceil 2048Kbit burst 1499b/8 mpu 0b overhead 0b cburst 1499b/8 mpu 0b
overhead 0b level 0
Sent 17296215990 bytes 103655258 pkt (dropped 2418, overlimits 0
requeues 0)
rate 4080bit 4pps backlog 0b 0p requeues 0
lended: 101539112 borrowed: 2111151 giants: 0
tokens: 105797 ctokens: 79343
class htb 1:1 root rate 40960Kbit ceil 40960Kbit burst 1489b/8 mpu 0b
overhead 0b cburst 1489b/8 mpu 0b overhead 0b level 7
Sent 45876115374254 bytes 2701723036 pkt (dropped 0, overlimits 0
requeues 0)
rate 15337Kbit 1356pps backlog 0b 0p requeues 0
lended: 3184349479 borrowed: 0 giants: 0
tokens: 172 ctokens: 172
class htb 1:12 parent 1:1 leaf 12: prio 1 quantum 110592 rate 9216Kbit
ceil 10240Kbit burst 1498b/8 mpu 0b overhead 0b cburst 1497b/8 mpu 0b
overhead 0b level 0
Sent 1692905979286 bytes 1860718919 pkt (dropped 1850026, overlimits 0
requeues 0)
rate 35960bit 19pps backlog 0b 0p requeues 0
lended: 1750660970 borrowed: 110057949 giants: 0
tokens: 16875 ctokens: 15171
----------cut here from show tc on old firewall -------------
So, what am I doing incorrectly?
S.
------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
