[LARTC] Specific question on ingress policing

[LARTC] Specific question on ingress policing

[David McNab]

Hi,

After more research, and a couple of kind replies to earlier questions, 
I've tried putting 'index nnn' in my ingress policers.

It appears that connections matching ingress policers with (say) 'rate 
32kbit index 20' share a total incoming bandwidth pool of 32kbits.

Is that indeed the case?

In other words - if I have one ingress policer that matches 3 current 
connections, and another ingress policer matching 2 current connections, 
and both policers are set to 'rate 32kbit index 20' - is it true that 
inbound bandwidth for all 5 connections is throttled to a shared total 
of 32kbit?

Thanks and regards
David

--

leave this line intact so your email gets through my junk mail filter
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Specific question on ingress policing

[Roy]

One remark: policers have nothing to do with incoming bandwitch they also
can be used with any forwarded trafic,
(if you will make attempt to use them on localy originated packets you can
even hang your computer)

As I observed, setting 'rate 32kbit index 20' for each will not do anything
good,
they were behaving like independent clasess, so total trafic was sum of all
rates.
then I reduced rates for all clases su that sum of the rates was max rate
alocated for that poll
and it worked more or less.
I am not sure if this was correct.

probably the best way to find how index works is to look at source code.
It can be very usefull feature. Which could alow do this:
if www trafic rate exceeds 100kb/s then drop all p2p packets

I was trying this in such way

class www policer rate 100kbit index 20
class p2p policer index 20 drop

more or less it was working


----- Original Message ----- 
From: "David McNab" <david@rebirthing.co.nz>
To: <>
Sent: Sunday, March 14, 2004 4:55 AM
Subject: [LARTC] Specific question on ingress policing


> Hi,
>
> After more research, and a couple of kind replies to earlier questions,
> I've tried putting 'index nnn' in my ingress policers.
>
> It appears that connections matching ingress policers with (say) 'rate
> 32kbit index 20' share a total incoming bandwidth pool of 32kbits.
>
> Is that indeed the case?
>
> In other words - if I have one ingress policer that matches 3 current
> connections, and another ingress policer matching 2 current connections,
> and both policers are set to 'rate 32kbit index 20' - is it true that
> inbound bandwidth for all 5 connections is throttled to a shared total
> of 32kbit?
>
> Thanks and regards
> David
>
> --
>
> leave this line intact so your email gets through my junk mail filter
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Specific question on ingress policing

[David McNab]

Roy wrote:
> As I observed, setting 'rate 32kbit index 20' for each will not do anything
> good,
> they were behaving like independent clasess, so total trafic was sum of all
> rates.
> then I reduced rates for all clases su that sum of the rates was max rate
> alocated for that poll
> and it worked more or less.

That's a good approach. I can easily change pyshaper (mentioned in 
earlier post) so that once it determines the number of connections 
matching a criterion, it divides the bandwidth allocation by the number 
of such connections, and generates tc ingress policing filter commands 
accordingly.

> I am not sure if this was correct.
> 
> probably the best way to find how index works is to look at source code.

I'm very time-constrained. Given that I'm often having to study source 
code just to find out how to use other programs, I don't have the time 
to do this with tc, sadly. When someone writes a thorougly detailed 
manual on tc usage (including a complete tc-filters manpage), it'll be a 
good thing.

> class www policer rate 100kbit index 20
> class p2p policer index 20 drop

Can you please provide all your *complete* tc commands, so I can see 
this in context and form an understanding?

> more or less it was working

Good to know.

-- 

Kind regards
David

--

leave this line intact so your email gets through my junk mail filter
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/