On 08/26/2017 01:11 AM, Roel de Wildt wrote: > Hello, > > I'm trying to configure the inbound and outbound traffic shaping on > shorewall 5.1.5.2. > > The problem is that if I specify the interface in tcdevices with both > the IN_BANDWITH and OUT_BANDWIDTH, the internet speed drops to 1mbit > while I have specified 300mbit and 28mbit. > > If I only specify the OUT_BANDWIDTH it just works fine. > > What could be the cause of this? > > If I do a shorewall show tc it does not show the specified IN_BANDWIDTH > at all. > > The settings I have done in the tcdevices are: > > # > # Shorewall -- /etc/shorewall/tcdevices > # > # For information about entries in this file, type "man shorewall-tcdevices" > # > # See http://shorewall.net/traffic_shaping.htm for additional information. > # > ############################################################################### > #INTERFACE IN_BANDWITH OUT_BANDWIDTH OPTIONS REDIRECT > 1:ens161 - 28mbit > 2:ens256 - 14mbit > > My tcclasses file: > > # > # Shorewall -- /etc/shorewall/tcclasses > # > # For information about entries in this file, type "man shorewall-tcclasses" > # > # See http://shorewall.net/traffic_shaping.htm for additional information. > # > ############################################################################### > #INTERFACE MARK RATE CEIL PRIO OPTIONS > 1:2 12 full/4 full 1 > tcp-ack,tos-minimize-delay > 1:3 13 full/4 full 2 > 1:4 14 full/4 full 3 default > 1:5 15 full/4 full 4 > # > 2:2 22 full/4 full 1 > tcp-ack,tos-minimize-delay > 2:3 23 full/4 full 2 > 2:4 24 full/4 full 3 default > 2:5 25 full/4 full 4 > # > > My tcfilters files: > > # > # Shorewall -- /etc/shorewall/tcfilters > # > # For information about entries in this file, type "man shorewall-tcfilters" > # > # See http://shorewall.net/traffic_shaping.htm for additional information. > # > ###################################################################################### > #CLASS SOURCE DEST PROTO DPORT SPORT > TOS LENGTH > 1:4 - 192.168.179.1 > 1:2 - 192.168.179.1 icmp > echo-request,echo-reply > 1:2 - 192.168.179.1 udp,tcp domain > 1:3 - 192.168.179.1 tcp www,https > 1:5 - 192.168.179.1 tcp 119,563 > # > 2:4 - 192.168.178.1 > 2:2 - 192.168.178.1 icmp > echo-request,echo-reply > 2:2 - 192.168.178.1 udp,tcp domain > 2:3 - 192.168.178.1 tcp www,https > 2:5 - 192.168.178.1 tcp 119,563 > # >
Please see FAQs 97 and 97a. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users