On 08/26/2017 01:11 AM, Roel de Wildt wrote:
> Hello,
> 
> I'm trying to configure the inbound and outbound traffic shaping on
> shorewall 5.1.5.2.
> 
> The problem is that if I specify the interface in tcdevices with both
> the IN_BANDWITH and OUT_BANDWIDTH, the internet speed drops to 1mbit
> while I have specified 300mbit and 28mbit.
> 
> If I only specify the OUT_BANDWIDTH it just works fine.
> 
> What could be the cause of this?
> 
> If I do a shorewall show tc it does not show the specified IN_BANDWIDTH
> at all.
> 
> The settings I have done in the tcdevices are:
> 
> #
> # Shorewall -- /etc/shorewall/tcdevices
> #
> # For information about entries in this file, type "man shorewall-tcdevices"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ###############################################################################
> #INTERFACE      IN_BANDWITH     OUT_BANDWIDTH   OPTIONS         REDIRECT
> 1:ens161        -               28mbit
> 2:ens256        -               14mbit
> 
> My tcclasses file:
> 
> #
> # Shorewall -- /etc/shorewall/tcclasses
> #
> # For information about entries in this file, type "man shorewall-tcclasses"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ###############################################################################
> #INTERFACE      MARK    RATE            CEIL            PRIO    OPTIONS
> 1:2             12      full/4          full            1      
> tcp-ack,tos-minimize-delay
> 1:3             13      full/4          full            2
> 1:4             14      full/4          full            3       default
> 1:5             15      full/4          full            4
> #
> 2:2             22      full/4          full            1      
> tcp-ack,tos-minimize-delay
> 2:3             23      full/4          full            2
> 2:4             24      full/4          full            3       default
> 2:5             25      full/4          full            4
> #
> 
> My tcfilters files:
> 
> #
> # Shorewall -- /etc/shorewall/tcfilters
> #
> # For information about entries in this file, type "man shorewall-tcfilters"
> #
> # See http://shorewall.net/traffic_shaping.htm for additional information.
> #
> ######################################################################################
> #CLASS          SOURCE          DEST            PROTO   DPORT   SPORT  
> TOS     LENGTH
> 1:4             -               192.168.179.1
> 1:2             -               192.168.179.1   icmp  
>  echo-request,echo-reply
> 1:2             -               192.168.179.1   udp,tcp domain
> 1:3             -               192.168.179.1   tcp     www,https
> 1:5             -               192.168.179.1   tcp     119,563
> #
> 2:4             -               192.168.178.1
> 2:2             -               192.168.178.1   icmp  
>  echo-request,echo-reply
> 2:2             -               192.168.178.1   udp,tcp domain
> 2:3             -               192.168.178.1   tcp     www,https
> 2:5             -               192.168.178.1   tcp     119,563
> #
> 

Please see FAQs 97 and 97a.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to