* [LARTC] Q about "overlimit", and IMQ/NAT trick
@ 2002-12-11 9:39 christian mock
0 siblings, 0 replies; only message in thread
From: christian mock @ 2002-12-11 9:39 UTC (permalink / raw)
To: lartc
hi,
I've successfully implemented shaping and policing with HTB for my
SDSL line.
Some tips&tricks I discovered which were not covered in the FAQs and
docs I read:
- To discover the appropriate rate for your line, flood it with
traffic and reduce the rate until the matching class starts to show
a consistent backlog -- only then you've managed to take the queue
away from your modems/routers and into the shaping box.
- The docs only speak about the IMQ device in connection with the
PREROUTING chain -- the problem is that at that point, incoming
packets are not de-masqueraded yet, so you can't fwmark and shape
depending on the internal address; I use
<iptables packet marking>
iptables -i $EXT_IF -A FORWARD -t mangle -j IMQ
without problems.
Questions:
I'm not quite sure if I shoot myself in the foot with that IMQ setup
-- packets get stuffed into the IMQ device from the mangle table, but
where and how do they "reappear" after shaping?
The other question that remains is: with "tc qdisc show", I see
overlimit!=0 only for the root qdisc -- I would have expected it to
increase on the queues or classes where actual rate > configured
rate... why is that?
ciao,
cm.
--
Actually, I found New Zealanders to be the most akin to Canadians.
They also feel the looming presense of a next door neighbour country
full of loud, excessively happy and somewhat simple people, and are a
little intimidated by it. -- Paul Tomblin
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2002-12-11 9:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-12-11 9:39 [LARTC] Q about "overlimit", and IMQ/NAT trick christian mock
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.