OpenForum RSS: ipfw altq hfsc

ipfw altq hfsc (artemrts)

Sat, 17 Mar 2012 19:53:55 GMT

>[�� ]
>>>> block in
>>>> block out
>>>> pass in quick on $int_if inet from $vip to !(self) queue
>>>> down_vip
>>> ALTQ �� fbsd �� .
>> � �� . ��
>> _��_ �� PF (��
>> �� stateful filtering).
>> �� ?
> �� . �� - �� .

��, �� PF �� stateful firewalling. �� , �� keep-state. �� "� �� ", �� keep-stating �� (� �� nostate), �� .
��, �� keep-state � �� (set state-policy if-bound).
��, �� www ��. �� . ��

ipfw altq hfsc (Skif)

Sat, 17 Mar 2012 17:25:37 GMT

>>> �� :
>>> block in
>>> block out
>>> pass in quick on $int_if inet from $vip to !(self) queue
>>> down_vip
>> ALTQ �� fbsd �� .
> � �� . ��
> _��_ �� PF (��
> �� stateful filtering).
> �� ?

�� . �� - �� .

ipfw altq hfsc (artemrts)

Sat, 17 Mar 2012 09:55:01 GMT

>> �� :
>> block in
>> block out
>> pass in quick on $int_if inet from $vip to !(self) queue
>> down_vip
> ALTQ �� fbsd �� .

� �� . �� _��_ �� PF (�� stateful filtering).
�� ?

�� . PF User's Guide.

pass in on fxp0 proto tcp to port 80 queue http

With this rule, packets traveling back out fxp0 that match the stateful
connection will end up in the http queue. Note that even though the queue
keyword is being used on a rule filtering incoming traffic, the goal is to
specify a queue for the corresponding outgoing traffic; the above rule does
not queue incoming packets.

> ��, �� keep state. ��
> �� no state ��
> �� , �� , ��

ipfw altq hfsc (Skif)

Sat, 17 Mar 2012 06:24:31 GMT

> �� :
> block in
> block out
> pass in quick on $int_if inet from $vip to !(self) queue
> down_vip

ALTQ �� fbsd �� .
��, �� keep state. �� no state �� , �� , �� .

ipfw altq hfsc (DeadLoco)

Mon, 12 Mar 2012 07:51:01 GMT

> �� ipfw, �� pf.

� �� (src/dst-mask) �� (weight). ��, �� - �� , � �� , � �� -��-��.

ipfw altq hfsc (creeping_death)

Mon, 12 Mar 2012 06:50:14 GMT

>[�� ]
>> block in
>> block out
> pass in quick on $int_if inet from $vip to !(self) queue down_vip
> tag vip
> ....................... ... from $managment to !(self) queue down_manager tag manager
> pass out quick on $int_if inet from any to any
>> �� :
> pass out quick on $ext_if inet from $ext_if to any queue up_vip
> tagged vip
> ........... ...................................................

�� . �� cbq �� ipfw, �� pf.

ipfw altq hfsc (artemrts)

Sun, 11 Mar 2012 18:02:29 GMT

>[�� ]
> �� cbq.
> ��-�� :
> set state-policy if-bound
> altq on ae0 cbq bandwidth 10Mb queue { standard, vip, management,
> work }
> queue down_vip bandwidth 30% priority 7 cbq (borrow)
> queue down_management bandwidth 25% priority 5 cbq (borrow)
> queue down_work bandwidth 25% priority 3 cbq (borrow)
> queue down_standard bandwidth 20% cbq(borrow)
> �� .

Oops. �� .

> �� :
> block in
> block out

pass in quick on $int_if inet from $vip to !(self) queue down_vip tag vip
....................... ... from $managment to !(self) queue down_manager tag manager
pass out quick on $int_if inet from any to any

> �� :

pass out quick on $ext_if inet from $ext_if to any queue up_vip tagged vip
........... ...................................................

ipfw altq hfsc (artemrts)

Sun, 11 Mar 2012 17:54:13 GMT

>[�� ]
> $cmd 4 count altq standard all from any to any out via
> $lif
> �� , $lif �� . ��
> �� : �� management �� ,
> �� vip, ��
> �� 50\50 �� . �� pfctl -s
> queue -v �� . �� realtime,
> upperlimit, linkshare �� ...
> �� ?
> �� .

�� .
�� "��" �� src-mask, �� ipfw. �� pf/altq. �� pftop � �� .
� hfsc �� , �� . � �� cbq.
��-�� :

set state-policy if-bound

altq on ae0 cbq ba