<div dir="ltr">I am very scared after reading this<div><br></div><div><a href="https://wiki.freebsd.org/IpfwNg">https://wiki.freebsd.org/IpfwNg</a><br></div><div><br></div><div style>how could I put my trust in something that could have so many edge cases?</div>
<div style><br></div><div style>I know that is a lot off topic, but what about Xen? May it be reliable to run routers/gateways/firewalls over Xen? </div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 13 April 2013 11:19, Raimundo Santos <span dir="ltr"><<a href="mailto:raitech@gmail.com" target="_blank">raitech@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Antonio!<div><br></div><div>Well, there is not much to miss ;) - it is an ISP which uses wireless to distribute internet, which in turns do not allow us to control the bandwidth limit over the medium in a trusted way. Therefore, we need to limit this traffic in some way, and the actual way is with linux(iptables + tc), but it is hard to maintain - and almost everything is manualy controled 0_o (I am new at this job)</div>
<div><br></div><div>A really liked the PF syntax, it is clean and easy to read - even more within the match keyword that is new in OpenBSD >= 4.7. But the queuing methods implemented in PF do not let to share the bandwitdh in an overbooking fashion, which is crucial to an ISP. The only way is to divide the queues to share bandwidth in a manner that do not surpass the total.</div>
<div><br></div><div>By now, I am putting my chips in FreeBSD ipfw integration with ALTQ, in a way that the packets are limited by pipe and queued with HFSC in ALTQ. But I really dislike the syntax of ipfw, it reminds me of iptables.</div>
<div><br></div><div>Cheers!</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On 12 April 2013 18:13, Antonio Huete Jimenez <span dir="ltr"><<a href="mailto:tuxillo@quantumachine.net" target="_blank">tuxillo@quantumachine.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div>
<div>
Hi Raimundo,
</div>
<div>
</div>
<div>
I don't think vkernels are up to the task currently. In my experience/opinion they are not stable and fast enough now for what you are intending to do.
</div>
<div>
Maybe I am just missing some details of your setup.
</div>
<div>
</div>
<div>
Cheers,
</div>
<div>
Antonio Huete
</div>
<blockquote style="margin-left:0px;padding-left:10px;border-left:solid 1px blue" type="cite">
El 12 de abril de 2013 a las 17:14 Raimundo Santos <<a href="mailto:raitech@gmail.com" target="_blank">raitech@gmail.com</a>> escribió:
<br><div><div>
<br>
<div dir="ltr">
On 12 April 2013 02:58, Sepherosa Ziehau
<span><<a href="mailto:sepherosa@gmail.com" target="_blank">sepherosa@gmail.com</a>></span> wrote:
<br>
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
</div> You could use ALTQ fairq w/ PF, which is similar to dummynet's WF2Q
<br>
<br> Best Regards,
<br> sephe
<br>
<br> --
<br> Tomorrow Will Never Die
</blockquote>
</div>
<br>Hum... but I need to do a hard limiting to all my customers. They have a unique IP address, so I can decide about the bandwidth (here, we are about to implement RADIUS to do auth too). The ideia here is to
</div>
<div class="gmail_extra">
</div>
<div class="gmail_extra">
1. limit external in/out traffic
</div>
<div class="gmail_extra">
2. do QoS over this limited traffic
</div>
<div class="gmail_extra">
</div>
<div class="gmail_extra">
I have an average of 600 clients at the same time, so I think that FAIRQ could be a good thing but not to hard limiting every IP.
</div>
<div class="gmail_extra">
</div>
<div class="gmail_extra">
If I offer three kinds of bandwidth to my customers, may I define three subclasses in FAIRQ and let the traffic of the right kinds go through the right queues? I think it does not work: if someone is hogging that queue, what the others will end up with?
<br clear="all">
<div>
</div> --
<br>--------------------------------------------
<br>Raimundo A. P. Santos
<br>Bacharelando em Informática
<br>ICMC - USP
</div>
</div>
</div></div></blockquote>
<div>
<br>
</div>
</div></blockquote></div><br><br clear="all"><div><br></div>-- <br>--------------------------------------------<br>Raimundo A. P. Santos<br>Bacharelando em Informática<br>ICMC - USP
</div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>--------------------------------------------<br>Raimundo A. P. Santos<br>Bacharelando em Informática<br>ICMC - USP
</div>