From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andraz Sraka Date: Mon, 26 Jun 2006 17:14:26 +0000 Subject: Re: [LARTC] Optimization on Bandwidth Management-L7 filtering? Message-Id: <1151342066.30132.9.camel@localhost> MIME-Version: 1 Content-Type: multipart/mixed; boundary="===============1732910972==" List-Id: References: In-Reply-To: To: lartc@vger.kernel.org --===============1732910972== Content-Type: multipart/signed; micalg=sha1; protocol="application/x-pkcs7-signature"; boundary="=-thFs84OrNzOTMyP+w90p" --=-thFs84OrNzOTMyP+w90p Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-utPdOR8MWpW/vBuvinu0" --=-utPdOR8MWpW/vBuvinu0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable re On Sun, 2006-06-11 at 04:32 +0000, lee weejin wrote: > Since all the incoming packets was checked one by one-(it is time > consuming and will cause the processing delay if it is handling more > than 50 PC at a time), thus i am thinking that is there any way to > have a random checking on incoming packets ? Scipt or tools? so that > it wont check all the incoming packets one follow by another one. Try marking only first/new packages/connections, that will be analyzed by layer-7 filter in another chain and there do whole connecting mark (-j CONNMARK --mark XX). Those mark packages/connections can be then picked up by 'tc' for prioritizing traffic or netfilter for rejecting/dropping/.. traffic. regards, Andraz --=20 BOFH excuse #62: need to wrap system in aluminum foil to fix problem --=-utPdOR8MWpW/vBuvinu0 Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQBEoBXwVIImx7Y1h/QRAvi3AJ99PfHmgrcw3tTHzu7/jPEwrhmhWACcDrYu 5AaIBjklnDTuEQFmDBB0bno=3D =3DQL3e -----END PGP SIGNATURE----- --=-utPdOR8MWpW/vBuvinu0-- --=-thFs84OrNzOTMyP+w90p Content-Type: application/x-pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGiDCCAz8w ggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0 ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcx KDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0 ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxA dGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpB MSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA xKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7d yfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/ p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDow OKA2oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3Js MAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgw DQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A 9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYI Tq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8wggNBMIICqqADAgECAhBsfqFQxAjqIAcp Itl8Aj6GMA0GCSqGSIb3DQEBBAUAMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29u c3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNz dWluZyBDQTAeFw0wNjAzMjMxMDQ4NTNaFw0wNzAzMjMxMDQ4NTNaMHcxDjAMBgNVBAQTBVNyYWth MQ8wDQYDVQQqEwZBbmRyYXoxFTATBgNVBAMTDEFuZHJheiBTcmFrYTEbMBkGCSqGSIb3DQEJARYM YUBhdWZiaXgub3JnMSAwHgYJKoZIhvcNAQkBFhFhbmRyYXpAYXVmYml4Lm9yZzCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOaHBNwQORGwkK1h72ods3p0I82IJo6gUOc+yVbdakWdF03/ T7ZKe42XWvogzKn3YmE3RF/4LjerbrDDS68CfdjnHoUbQfM145tS0FbbuwofF9rz+7tTSarnhixw LaGLP4/YEkmbjvjElongr2ajszdqtRbsF+tXHYyW7LpjFZFaa/gZXgmkYLzPfGEGuj6CVU15cBnT 8XhwnepvhUUFJph5TjjB8hvIpDJJXJngjOwNXtpXpgFQdMnRBdGy/UK/RcX0XlkvWIRZwJdeQsAW YTkut5vO3TPQYGPTalHWMFgfyxPItn+Q/t7fqx9mMRUuS5/zCZfeT+dPRkXk4U8oOHUCAwEAAaNf MF0wDgYDVR0PAQH/BAQDAgSQMBEGCWCGSAGG+EIBAQQEAwIFIDAqBgNVHREEIzAhgQxhQGF1ZmJp eC5vcmeBEWFuZHJhekBhdWZiaXgub3JnMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEA Jnjdz2I8VtjHowLSkNlmIviCGYOJZixNH7fQ0lI3JNV7AquPEY9snQ12A3sdA2qBTz/CaudlIyHW YjFOzovVHkfC/epdWK5456RxObv3tkKCUC8ZheMXS9TwlshffAre+g7uIaBRecaY9HRX1Zq40q/O 8MESaarJ/K/uxLFQkNMxggH8MIIB+AIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1h aWwgSXNzdWluZyBDQQIQbH6hUMQI6iAHKSLZfAI+hjAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDYwNjI2MTcxNDI0WjAjBgkqhkiG9w0BCQQx FgQUNqRBHsLlwgBcBHVyJ4acY5isricwDQYJKoZIhvcNAQEBBQAEggEACzdoeM3XOnn+ek2u+zmI 9LRWM+g+wKdWVVaNDN0tIb52wqlDEiuQxDA0XnsurTuGP54w0z2xJh1NysiSDlOiihbMIl6YvabW vX+tB+E86afSQvujVNPj3j+lR7MNsS09CBvFA/Mq+op84v469L5dPTpIW0xRrNoop5ndi8uYYK2X iJHMw2H9qakVWkfRsmLZ64KtEsqcv1g33rIrxHdNhHdO98KkjAXPzIX0p1FXharcrL3Wh1Ynpm3B ON11aZIGCRrQM1E17OF0p6e/a+C1aB5RJy+Rh7bl/aC7HMOuOHlZmeIwd44EzPAPEEttP0zMQrDZ 1pnoHa9BKJT1PqX63QAAAAAAAA== --=-thFs84OrNzOTMyP+w90p-- --===============1732910972== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc --===============1732910972==--