Article View: bit.listserv.openbsd-pf
Article #274Re: ALTQ
From: Helmut Schneider
Date: Wed, 15 Apr 2009 10:08
Date: Wed, 15 Apr 2009 10:08
39 lines
2839 bytes
2839 bytes
Stuart Henderson <stu@spacehopper.org> wrote:
> On 2009/04/14 17:37, Helmut Schneider wrote:
>> What I want to do is to assign the default queue the whole bandwith
>> (100%) and let e.g. http borrow 5Mb. As I do not know the connection
>> speed (might be 1GB or 100Mb within the local LAN, but might also be
>> 34Mb for the internet) I guess I need to mix absolute values and
>> percentages which I currently fail to implement.
>
> you can't really use altq well where you don't know the connection speed.
> to work properly when the line is full, you need to restrict it to the
> lowest speed your connection might be running at, and take into account
> any other users (unless all traffic on the line is going through this
> box).
Actually I do traffic shaping at the border router but I was looking for a
more sophisticated solution to restrict bandwidth for certain services at
the host itself (e.g. to limit ftp servers' upload speed to the internet).
> altq running on the proxy may well not be the correct tool for the
> job here. maybe squid connection pools, or something else, are more
> appropriate. or maybe altq on another machine/cluster (e.g. a
> firewall) sitting between the router and the entire network might
> be a good choice.
I'm currently thinking about the latter, to put it between the router and
the firewall as a pure traffic shaping solution. Meanwhile I use the
following values:
altq on $extIF cbq bandwidth 1000Mb queue { std, traf_ext }
queue std bandwidth 990Mb cbq(default borrow)
queue traf_ext bandwidth 10Mb { traf_ext_ftp, traf_ext_http }
queue traf_ext_ftp bandwidth 50% cbq(borrow)
queue traf_ext_http bandwidth 50% cbq(borrow)
Thanks to both of you, Helmut
--
No Swen today, my love has gone away
My mailbox stands for lorn, a symbol of the dawn
Technical Details
Message-ID:
<gs4avd$86k$1@ger.gmane.org>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrnReferences:
<gs1v8k$kn7$1@ger.gmane.org> <20090414150555.09105686@openbsd.pap.st> <61466627EE4B4B78BF3FB62A75A673CD@vpe.de> <20090414162259.3b2ae4e3@openbsd.pap.st> <01303FCC992945EF8E0061402BE1CA0E@vpe.de> <20090414182721.GI27568@symphytum.spacehopper.org>Show Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,b1fb5409556d4467,start X-Google-Attributes: gidff4ef,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn From: jumper99@gmx.de (Helmut Schneider) Newsgroups: bit.listserv.openbsd-pf Subject: Re: ALTQ Date: 15 Apr 2009 03:08:51 -0700 Organization: None Lines: 41 Message-ID: <gs4avd$86k$1@ger.gmane.org> References: <gs1v8k$kn7$1@ger.gmane.org> <20090414150555.09105686@openbsd.pap.st> <61466627EE4B4B78BF3FB62A75A673CD@vpe.de> <20090414162259.3b2ae4e3@openbsd.pap.st> <01303FCC992945EF8E0061402BE1CA0E@vpe.de> <20090414182721.GI27568@symphytum.spacehopper.org> NNTP-Posting-Host: jumper99 Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit NNTP-Posting-Date: 15 Apr 2009 10:08:52 GMT