From: bert hubert ahu@ds9a.nl
To: lartc@vger.kernel.org
Subject: [LARTC] CBQ and load balancing
Date: Mon, 09 Oct 2000 14:08:50 +0000 [thread overview]
Message-ID: <marc-lartc-98373938216761@msgid-missing> (raw)
In-Reply-To: <marc-lartc-98373938216760@msgid-missing>
<PRE>On Mon, Oct 09, 2000 at 02:46:17PM +0200, joern maier wrote:
><i> Hi there,
</I>><i>
</I>><i> I got a question about CBQ, hope anybody can help me (did not found
</I>><i> anything
</I>><i> in the archives).
</I>
This is the first post ever on the LARTC list, so this does not amaze me :-)
><i> My setup is like this:
</I>><i> all hosts are Athlon 800MHZ, 256 MByte RAM and 3com9x Netcards (100MBit)
</I>><i> Distribution SuSE 7.0 -> Kernel 2.2.16
</I>><i>
</I>><i> Host Setup:
</I>><i>
</I>><i> ---www_server_1
</I>><i> /
</I>><i> --------------|-------------www_server_2
</I>><i> load balancer \
</I>><i> (with CBQ) ---www_server_3
</I>><i> 192.168.10.17 \x18
</I>><i>
</I>><i>
</I>><i> all I want to do is shaping the INCOMING traffic this means
</I>><i> that if I define a special IP only 200Kbit of HTTP request
</I>><i> traffic (as an example) is forwarded to the webservers from
</I>><i> that IP.
</I>
Well, you can't shape incoming traffic directly. You can shape traffic going
out to www_server_[123].
><i> The load balancer (Linux Virtual Server) works on IP basis and
</I>><i> is integrated as a patch into the system-kernel. It distributes
</I>><i> the packets via "direct routing" this means load balancer and
</I>><i> www_server_X have all the same IP. If a package is received by
</I>><i> the LB it changes the MAC Address of the package and forward it
</I>><i> to the right www_server_X.
</I>
Perhaps this interferes with Linux traffic shaping, not sure. Does your
loadbalancer have multiple ethernet cards? If so, you could shape the
'backend card' to limit itself to 200kbit.
><i> The following attempts did not work:
</I>><i>
</I>><i> using the fw filter:
</I>><i> implementing one of the following rules via ipchains did not work:
</I>><i> (ip 192.168.10.15 is the client I want to restrict bandwidth)
</I>><i>
</I>><i> ipchains -A forward -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>><i> or
</I>><i> ipchains -A output -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>><i> or
</I>><i> ipchains -A forward -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>><i> or
</I>><i> ipchains -A output -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>><i>
</I>><i> the filter was set up with the following rule
</I>><i>
</I>><i> tc filter add dev eth0 protocol ip parent 100:0 prio 100 handle 1 fw
</I>><i> classid 100:100
</I>
Did you enable 'shaping based on fwmark' when compiling the kernel?
><i> should be reduced to to let´s say 200Kbit, with the last two rules
</I>><i> traffic
</I>><i> from source IP 192.168.10.15 sould be reduced to 200Kbit. Non did work.
</I>><i>
</I>><i> using the u32 filter:
</I>><i>
</I>><i> tc filter add dev eth0 parent 100:0 protocol ip prio 100 u32 match ip
</I>><i> src 192.168.10.15 flowid 100:100
</I>
Here you match outgoing traffic on eth0 with a source of your webbrowser
client.
><i> the whole outgoing traffic was reduced to 200Kbit.
</I>><i> So if anybody has an idea what I did wrong in first place I would be
</I>><i> very
</I>><i> happy if you could tell me. Or is it impossible to shape incomming
</I>><i> traffic
</I>><i> like this. If you need any further information please ask me.
</I>
Please give some details on your network cards, and include where
192.168.10.15 is in this picture, and which card it is connected to, and
which card the webservers are connected to.
Regards,
bert hubert
--
PowerDNS Versatile DNS Services
Trilab The Technology People
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</PRE>
next prev parent reply other threads:[~2000-10-09 14:08 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2000-10-09 12:46 [LARTC] CBQ and load balancing joern
2000-10-09 14:08 ` bert [this message]
2000-10-10 10:36 ` joern
2000-10-10 13:42 ` joern
2000-10-10 13:53 ` bert
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-98373938216761@msgid-missing \
--to=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.