[LARTC] tcng and scheduling ssh

[LARTC] tcng and scheduling ssh

[Michael P. Soulier]

Hey people,

I have the following tcng configuration:

#include "fields.tc"
#include "ports.tc"

dev "eth0" {
    egress {
        // Voice traffic
        class (<$voice>)
            if udp_dport >= 20000 && udp_dport <= 23000;
        // SSH connections
        class (<$interactive>)
            if tcp_dport = PORT_SSH;
        // Everything else
        class (<$other>)
            if 1;

        prio {
            $voice = class { fifo; }
            $interactive = class { fifo; }
            $other = class { fifo; }
        }
    }
}

So, this should be a simple prio queue, with the above udp traffic
classified as voice, and getting the highest priority. Second, should be
ssh traffic, and then everything else.

The problem is that while the packet counts on the second band go up
initially after the ssh connection, the subsequent traffic, obviously
handled by iptables connection tracking, seems to all go to the third
band. Should it not all go to the second, as it's still tcp port 22?

Thanks,
Mike

-- 
Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522
6000/6010/60* Development, Mitel Networks Corporation
"...the word HACK is used as a verb to indicate a massive amount of nerd-like
effort." -Harley Hahn, A Student's Guide to Unix
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] tcng and scheduling ssh

[Michael P. Soulier]

On 07/09/04 Michael P. Soulier did say:

> #include "fields.tc"
> #include "ports.tc"
> 
> dev "eth0" {
>     egress {
>         // Voice traffic
>         class (<$voice>)
>             if udp_dport >= 20000 && udp_dport <= 23000;
>         // SSH connections
>         class (<$interactive>)
>             if tcp_dport = PORT_SSH;
>         // Everything else
>         class (<$other>)
>             if 1;
> 
>         prio {
>             $voice = class { fifo; }
>             $interactive = class { fifo; }
>             $other = class { fifo; }
>         }
>     }
> }

Scratch that. This configuration seems to work fine on egress. PEBKAC. 

Mike

-- 
Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522
6000/6010/60* Development, Mitel Networks Corporation
"...the word HACK is used as a verb to indicate a massive amount of nerd-like
effort." -Harley Hahn, A Student's Guide to Unix
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/