All of lore.kernel.org
 help / color / mirror / Atom feed
* [LARTC] CBQ and load balancing
@ 2000-10-09 12:46 joern
  2000-10-09 14:08 ` bert
                   ` (3 more replies)
  0 siblings, 4 replies; 5+ messages in thread
From: joern @ 2000-10-09 12:46 UTC (permalink / raw)
  To: lartc

<PRE>Hi there,

I got a question about CBQ, hope anybody can help me (did not found
anything
in the archives).
My setup is like this:
all hosts are Athlon 800MHZ, 256 MByte RAM and 3com9x Netcards (100MBit)
Distribution SuSE 7.0 -&gt; Kernel 2.2.16

Host Setup:

			 ---www_server_1
			/
--------------|-------------www_server_2
	load balancer   \
	(with CBQ)	 ---www_server_3
	192.168.10.17	 \x18


all I want to do is shaping the INCOMING traffic this means
that if I define a special IP only 200Kbit of HTTP request 
traffic (as an example) is forwarded to the webservers from
that IP.
The load balancer (Linux Virtual Server) works on IP basis and
is integrated as a patch into the system-kernel. It distributes
the packets via &quot;direct routing&quot; this means load balancer and
www_server_X have all the same IP. If a package is received by
the LB it changes the MAC Address of the package and forward it
to the right www_server_X.
The following attempts did not work:

using the fw filter:
implementing one of the following rules via ipchains did not work:
(ip 192.168.10.15 is the client I want to restrict bandwidth)

ipchains -A forward -p ip -d 192.168.10.17 m 1 -j ACCEPT
or
ipchains -A output -p ip -d 192.168.10.17 m 1 -j ACCEPT
or
ipchains -A forward -p ip -s 192.168.10.15 m 1 -j ACCEPT
or
ipchains -A output -p ip -s 192.168.10.15 m 1 -j ACCEPT

the filter was set up with the following rule

tc filter add dev eth0 protocol ip parent 100:0 prio 100 handle 1 fw
classid 100:100

I far as I know with one of the first two rules the whole incoming
traffic
should be reduced to to let´s say 200Kbit, with the last two rules
traffic
from source IP 192.168.10.15 sould be reduced to 200Kbit. Non did work.

using the u32 filter:

tc filter add dev eth0 parent 100:0 protocol ip prio 100 u32 match ip
src 192.168.10.15 flowid 100:100

did not work either

I tried if CBQ really works with a setup like this

client ---- www_server

and an ipchains rule like

ipchains -A output -p ip -d 192.168.10.15 m 1 -j ACCEPT

the whole outgoing traffic was reduced to 200Kbit.
So if anybody has an idea what I did wrong in first place I would be
very 
happy if you could tell me. Or is it impossible to shape incomming
traffic 
like this. If you need any further information please ask me. 

thanks,
  Joern

P.S.: sorry for my bad english


</PRE>

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [LARTC] CBQ and load balancing
  2000-10-09 12:46 [LARTC] CBQ and load balancing joern
@ 2000-10-09 14:08 ` bert
  2000-10-10 10:36 ` joern
                   ` (2 subsequent siblings)
  3 siblings, 0 replies; 5+ messages in thread
From: bert @ 2000-10-09 14:08 UTC (permalink / raw)
  To: lartc

<PRE>On Mon, Oct 09, 2000 at 02:46:17PM +0200, joern maier wrote:
&gt;<i> Hi there,
</I>&gt;<i> 
</I>&gt;<i> I got a question about CBQ, hope anybody can help me (did not found
</I>&gt;<i> anything
</I>&gt;<i> in the archives).
</I>
This is the first post ever on the LARTC list, so this does not amaze me :-)

&gt;<i> My setup is like this:
</I>&gt;<i> all hosts are Athlon 800MHZ, 256 MByte RAM and 3com9x Netcards (100MBit)
</I>&gt;<i> Distribution SuSE 7.0 -&gt; Kernel 2.2.16
</I>&gt;<i> 
</I>&gt;<i> Host Setup:
</I>&gt;<i> 
</I>&gt;<i> 			 ---www_server_1
</I>&gt;<i> 			/
</I>&gt;<i> --------------|-------------www_server_2
</I>&gt;<i> 	load balancer   \
</I>&gt;<i> 	(with CBQ)	 ---www_server_3
</I>&gt;<i> 	192.168.10.17	 \x18
</I>&gt;<i> 
</I>&gt;<i> 
</I>&gt;<i> all I want to do is shaping the INCOMING traffic this means
</I>&gt;<i> that if I define a special IP only 200Kbit of HTTP request 
</I>&gt;<i> traffic (as an example) is forwarded to the webservers from
</I>&gt;<i> that IP.
</I>
Well, you can't shape incoming traffic directly. You can shape traffic going
out to www_server_[123].

&gt;<i> The load balancer (Linux Virtual Server) works on IP basis and
</I>&gt;<i> is integrated as a patch into the system-kernel. It distributes
</I>&gt;<i> the packets via &quot;direct routing&quot; this means load balancer and
</I>&gt;<i> www_server_X have all the same IP. If a package is received by
</I>&gt;<i> the LB it changes the MAC Address of the package and forward it
</I>&gt;<i> to the right www_server_X.
</I>
Perhaps this interferes with Linux traffic shaping, not sure. Does your
loadbalancer have multiple ethernet cards? If so, you could shape the
'backend card' to limit itself to 200kbit.

&gt;<i> The following attempts did not work:
</I>&gt;<i> 
</I>&gt;<i> using the fw filter:
</I>&gt;<i> implementing one of the following rules via ipchains did not work:
</I>&gt;<i> (ip 192.168.10.15 is the client I want to restrict bandwidth)
</I>&gt;<i> 
</I>&gt;<i> ipchains -A forward -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>&gt;<i> or
</I>&gt;<i> ipchains -A output -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>&gt;<i> or
</I>&gt;<i> ipchains -A forward -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>&gt;<i> or
</I>&gt;<i> ipchains -A output -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>&gt;<i> 
</I>&gt;<i> the filter was set up with the following rule
</I>&gt;<i> 
</I>&gt;<i> tc filter add dev eth0 protocol ip parent 100:0 prio 100 handle 1 fw
</I>&gt;<i> classid 100:100
</I>
Did you enable 'shaping based on fwmark' when compiling the kernel?

&gt;<i> should be reduced to to let´s say 200Kbit, with the last two rules
</I>&gt;<i> traffic
</I>&gt;<i> from source IP 192.168.10.15 sould be reduced to 200Kbit. Non did work.
</I>&gt;<i> 
</I>&gt;<i> using the u32 filter:
</I>&gt;<i> 
</I>&gt;<i> tc filter add dev eth0 parent 100:0 protocol ip prio 100 u32 match ip
</I>&gt;<i> src 192.168.10.15 flowid 100:100
</I>
Here you match outgoing traffic on eth0 with a source of your webbrowser
client.

&gt;<i> the whole outgoing traffic was reduced to 200Kbit.
</I>&gt;<i> So if anybody has an idea what I did wrong in first place I would be
</I>&gt;<i> very 
</I>&gt;<i> happy if you could tell me. Or is it impossible to shape incomming
</I>&gt;<i> traffic 
</I>&gt;<i> like this. If you need any further information please ask me. 
</I>
Please give some details on your network cards, and include where
192.168.10.15 is in this picture, and which card it is connected to, and
which card the webservers are connected to.

Regards,

bert hubert

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet


</PRE>

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [LARTC] CBQ and load balancing
  2000-10-09 12:46 [LARTC] CBQ and load balancing joern
  2000-10-09 14:08 ` bert
@ 2000-10-10 10:36 ` joern
  2000-10-10 13:42 ` joern
  2000-10-10 13:53 ` bert
  3 siblings, 0 replies; 5+ messages in thread
From: joern @ 2000-10-10 10:36 UTC (permalink / raw)
  To: lartc

<PRE>bert hubert wrote:
&gt;<i> </I>
&gt;<i> On Mon, Oct 09, 2000 at 04:32:58PM +0200, joern maier wrote:
</I>&gt;<i> &gt; o.k. here some more details I haven´t mentioned yet
</I>&gt;<i> </I>
&gt;<i> Please keep it on the list, I don't like to give private advice, I want</I>
&gt;<i> everyone to benefit.
</I>
sorry -&gt; I just pushed the reply button not thinking that it won´t get
back
to the list but to your private e-mail account

&gt;<i> </I>
&gt;<i> &gt;
</I>&gt;<i> &gt; network cofiguration of the LB
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; eth0      Link encap:Ethernet  HWaddr 00:01:02:07:5F:CF
</I>&gt;<i> &gt;           inet addr:192.168.10.6  Bcast:192.168.255.255
</I>&gt;<i> &gt; Mask:255.255.255.0
</I>&gt;<i> &gt;           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
</I>&gt;<i> &gt;           RX packets:50624 errors:0 dropped:0 overruns:0 frame:0
</I>&gt;<i> &gt;           TX packets:50630 errors:0 dropped:0 overruns:0 carrier:0
</I>&gt;<i> &gt;           collisions:0 txqueuelen:100
</I>&gt;<i> &gt;           Interrupt:11 Base address:0xe800
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; eth0:110  Link encap:Ethernet  HWaddr 00:01:02:07:5F:CF
</I>&gt;<i> &gt;           inet addr:192.168.10.17  Bcast:192.168.255.255
</I>&gt;<i> &gt; Mask:255.255.255.255
</I>&gt;<i> &gt;           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
</I>&gt;<i> &gt;           Interrupt:11 Base address:0xe800
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; lo        Link encap:Local Loopback
</I>&gt;<i> &gt;           inet addr:127.0.0.2  Mask:255.255.255.0
</I>&gt;<i> &gt;           UP LOOPBACK RUNNING  MTU:3924  Metric:1
</I>&gt;<i> &gt;           RX packets:77 errors:0 dropped:0 overruns:0 frame:0
</I>&gt;<i> &gt;           TX packets:77 errors:0 dropped:0 overruns:0 carrier:0
</I>&gt;<i> &gt;           collisions:0 txqueuelen:0
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; the route table:
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Kernel IP routing table
</I>&gt;<i> &gt; Destination     Gateway         Genmask         Flags Metric Ref    U</I>se
&gt;<i> &gt; Iface
</I>&gt;<i> &gt; lb.mynetwork.or *               255.255.255.255 UH    0      0       </I> 0
&gt;<i> &gt; eth0
</I>&gt;<i> &gt; 192.168.10.0    *               255.255.255.0   U     0      0       </I> 0
&gt;<i> &gt; eth0
</I>&gt;<i> &gt; default         gw.mynetwork.or 0.0.0.0         UG    0      0       </I> 0
&gt;<i> &gt; eth0
</I>&gt;<i> &gt;
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; -&gt; so I only got one ethernet card which is listening to the normal I</I>P
&gt;<i> &gt; and a
</I>&gt;<i> &gt; virtual IP (the LB IP)
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; for the nodes behind the lb the setup looks like this
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; eth0      Link encap:Ethernet  HWaddr 00:01:02:07:60:29
</I>&gt;<i> &gt;           inet addr:192.168.10.8  Bcast:192.168.10.255
</I>&gt;<i> &gt; Mask:255.255.255.0
</I>&gt;<i> &gt;           UP BROADCAST NOTRAILERS RUNNING  MTU:1500  Metric:1
</I>&gt;<i> &gt;           RX packets:180379 errors:0 dropped:0 overruns:0 frame:0
</I>&gt;<i> &gt;           TX packets:183275 errors:0 dropped:0 overruns:0 carrier:0
</I>&gt;<i> &gt;           collisions:0 txqueuelen:100
</I>&gt;<i> &gt;           Interrupt:11 Base address:0xe800
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; lo        Link encap:Local Loopback
</I>&gt;<i> &gt;           inet addr:127.0.0.1  Mask:255.0.0.0
</I>&gt;<i> &gt;           UP LOOPBACK RUNNING  MTU:3924  Metric:1
</I>&gt;<i> &gt;           RX packets:77 errors:0 dropped:0 overruns:0 frame:0
</I>&gt;<i> &gt;           TX packets:77 errors:0 dropped:0 overruns:0 carrier:0
</I>&gt;<i> &gt;           collisions:0 txqueuelen:0
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; lo:0      Link encap:Local Loopback
</I>&gt;<i> &gt;           inet addr:192.168.10.17  Mask:255.255.255.255
</I>&gt;<i> &gt;           UP LOOPBACK RUNNING  MTU:3924  Metric:1
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; routing table:
</I>&gt;<i> &gt; Kernel IP routing table
</I>&gt;<i> &gt; Destination     Gateway         Genmask         Flags Metric Ref    U</I>se
&gt;<i> &gt; Iface
</I>&gt;<i> &gt; lb.mynetwork.or *               255.255.255.255 UH    0      0       </I> 0
&gt;<i> &gt; lo
</I>&gt;<i> &gt; 192.168.10.0    *               255.255.255.0   U     0      0       </I> 0
&gt;<i> &gt; eth0
</I>&gt;<i> &gt; loopback        *               255.0.0.0       U     0      0       </I> 0
&gt;<i> &gt; lo
</I>&gt;<i> &gt; default         gw.mynetwork.or 0.0.0.0         UG    0      0       </I> 0
&gt;<i> &gt; eth0
</I>&gt;<i> &gt;
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; [...snip]
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; Well, you can't shape incoming traffic directly. You can shape traf</I>fic going
&gt;<i> &gt; &gt; out to www_server_[123].
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; that´s what I wanted to do
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; [...snip...]
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; Did you enable 'shaping based on fwmark' when compiling the kernel?</I>
&gt;<i> &gt; &gt;
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; did not do that in first place -&gt; but I recompiled the kernel right n</I>ow
&gt;<i> &gt; and
</I>&gt;<i> &gt; it didn´t work either.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; [...snip...]
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; Please give some details on your network cards, and include where
</I>&gt;<i> &gt; &gt; 192.168.10.15 is in this picture, and which card it is connected to</I>, and
&gt;<i> &gt; &gt; which card the webservers are connected to.
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; more detailed host setup
</I>&gt;<i> &gt;
</I>&gt;<i> &gt;
</I>&gt;<i> &gt;                                        ---www_server_1 (lo:0 192.168.</I>10.17)
&gt;<i> &gt;                                               /
</I>&gt;<i> &gt;   client  --------------|-------------------www_server_2 (lo:0
</I>&gt;<i> &gt; 192.168.10.17)
</I>&gt;<i> &gt; 192.168.10.15       load balancer       \
</I>&gt;<i> &gt;                     (with CBQ)         ---www_server_3 (lo:0 192.168.</I>10.17)
&gt;<i> &gt;                       eth0:110 = 192.168.10.17    \x18
</I>&gt;<i> &gt;
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; I tried to configure CBQ on the LB like this:
</I>&gt;<i> &gt; # tc filter add dev eth0:110 protocol ip parent 100:0 prio 100 handle</I> 1
&gt;<i> &gt; fw classid 100:100
</I>&gt;<i> &gt; answer was:
</I>&gt;<i> &gt; # Cannot find device eth0:110
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; does this mean that CBQ and virtual IP addresses do not work together</I> ?
&gt;<i> &gt;
</I>&gt;<i> &gt; -------
</I>&gt;<i> &gt; bert hubert wrote:
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; On Mon, Oct 09, 2000 at 02:46:17PM +0200, joern maier wrote:
</I>&gt;<i> &gt; &gt; Hi there,
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; I got a question about CBQ, hope anybody can help me (did not found</I>
&gt;<i> &gt; &gt; anything
</I>&gt;<i> &gt; &gt; in the archives).
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; This is the first post ever on the LARTC list, so this does not amaze</I> me
&gt;<i> &gt; :-)
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; My setup is like this:
</I>&gt;<i> &gt; &gt; all hosts are Athlon 800MHZ, 256 MByte RAM and 3com9x Netcards (100</I>MBit)
&gt;<i> &gt; &gt; Distribution SuSE 7.0 -&gt; Kernel 2.2.16
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; Host Setup:
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt;                        ---www_server_1
</I>&gt;<i> &gt; &gt;                       /
</I>&gt;<i> &gt; &gt; --------------|-------------www_server_2
</I>&gt;<i> &gt; &gt;       load balancer   \
</I>&gt;<i> &gt; &gt;       (with CBQ)       ---www_server_3
</I>&gt;<i> &gt; &gt;       192.168.10.17    \x18
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; all I want to do is shaping the INCOMING traffic this means
</I>&gt;<i> &gt; &gt; that if I define a special IP only 200Kbit of HTTP request
</I>&gt;<i> &gt; &gt; traffic (as an example) is forwarded to the webservers from
</I>&gt;<i> &gt; &gt; that IP.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Well, you can't shape incoming traffic directly. You can shape traffi</I>c
&gt;<i> &gt; going
</I>&gt;<i> &gt; out to www_server_[123].
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; The load balancer (Linux Virtual Server) works on IP basis and
</I>&gt;<i> &gt; &gt; is integrated as a patch into the system-kernel. It distributes
</I>&gt;<i> &gt; &gt; the packets via &quot;direct routing&quot; this means load balancer and
</I>&gt;<i> &gt; &gt; www_server_X have all the same IP. If a package is received by
</I>&gt;<i> &gt; &gt; the LB it changes the MAC Address of the package and forward it
</I>&gt;<i> &gt; &gt; to the right www_server_X.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Perhaps this interferes with Linux traffic shaping, not sure. Does yo</I>ur
&gt;<i> &gt; loadbalancer have multiple ethernet cards? If so, you could shape the</I>
&gt;<i> &gt; 'backend card' to limit itself to 200kbit.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; The following attempts did not work:
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; using the fw filter:
</I>&gt;<i> &gt; &gt; implementing one of the following rules via ipchains did not work:
</I>&gt;<i> &gt; &gt; (ip 192.168.10.15 is the client I want to restrict bandwidth)
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; ipchains -A forward -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>&gt;<i> &gt; &gt; or
</I>&gt;<i> &gt; &gt; ipchains -A output -p ip -d 192.168.10.17 m 1 -j ACCEPT
</I>&gt;<i> &gt; &gt; or
</I>&gt;<i> &gt; &gt; ipchains -A forward -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>&gt;<i> &gt; &gt; or
</I>&gt;<i> &gt; &gt; ipchains -A output -p ip -s 192.168.10.15 m 1 -j ACCEPT
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; the filter was set up with the following rule
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; tc filter add dev eth0 protocol ip parent 100:0 prio 100 handle 1 f</I>w
&gt;<i> &gt; &gt; classid 100:100
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Did you enable 'shaping based on fwmark' when compiling the kernel?
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; should be reduced to to let´s say 200Kbit, with the last two rule</I>s
&gt;<i> &gt; &gt; traffic
</I>&gt;<i> &gt; &gt; from source IP 192.168.10.15 sould be reduced to 200Kbit. Non did w</I>ork.
&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; using the u32 filter:
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; tc filter add dev eth0 parent 100:0 protocol ip prio 100 u32 match </I>ip
&gt;<i> &gt; &gt; src 192.168.10.15 flowid 100:100
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Here you match outgoing traffic on eth0 with a source of your webbrow</I>ser
&gt;<i> &gt; client.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; &gt; the whole outgoing traffic was reduced to 200Kbit.
</I>&gt;<i> &gt; &gt; So if anybody has an idea what I did wrong in first place I would b</I>e
&gt;<i> &gt; &gt; very
</I>&gt;<i> &gt; &gt; happy if you could tell me. Or is it impossible to shape incomming
</I>&gt;<i> &gt; &gt; traffic
</I>&gt;<i> &gt; &gt; like this. If you need any further information please ask me.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Please give some details on your network cards, and include where
</I>&gt;<i> &gt; 192.168.10.15 is in this picture, and which card it is connected to, </I>and
&gt;<i> &gt; which card the webservers are connected to.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Regards,
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; bert hubert
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; --
</I>&gt;<i> &gt; PowerDNS                     Versatile DNS Services
</I>&gt;<i> &gt; Trilab                       The Technology People
</I>&gt;<i> &gt; 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; _______________________________________________
</I>&gt;<i> &gt; LARTC mailing list / <A HREF="mailto:LARTC@mailman.ds9a.nl">LARTC@mailman.ds9a.nl</A>
</I>&gt;<i> &gt; <A HREF="http://mailman.ds9a.nl/mailman/listinfo/lartc">http://mailman.ds9a.nl/mailman/listinfo/lartc</A> HOWTO:
</I>&gt;<i> &gt; <A HREF="http://ds9a.nl/2.4Routing/">http://ds9a.nl/2.4Routing/</A>
</I>&gt;<i> &gt;
</I>&gt;<i> </I>
&gt;<i> --
</I>&gt;<i> PowerDNS                     Versatile DNS Services
</I>&gt;<i> Trilab                       The Technology People
</I>&gt;<i> 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</I>

</PRE>

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [LARTC] CBQ and load balancing
  2000-10-09 12:46 [LARTC] CBQ and load balancing joern
  2000-10-09 14:08 ` bert
  2000-10-10 10:36 ` joern
@ 2000-10-10 13:42 ` joern
  2000-10-10 13:53 ` bert
  3 siblings, 0 replies; 5+ messages in thread
From: joern @ 2000-10-10 13:42 UTC (permalink / raw)
  To: lartc

<PRE>bert hubert wrote:
&gt;<i> </I>
&gt;<i> On Tue, Oct 10, 2000 at 12:36:36PM +0200, joern maier wrote:
</I>&gt;<i> &gt; bert hubert wrote:
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; On Mon, Oct 09, 2000 at 04:32:58PM +0200, joern maier wrote:
</I>&gt;<i> &gt; &gt; &gt; o.k. here some more details I haven´t mentioned yet
</I>&gt;<i> &gt; &gt;
</I>&gt;<i> &gt; &gt; Please keep it on the list, I don't like to give private advice, I </I>want
&gt;<i> &gt; &gt; everyone to benefit.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; sorry -&gt; I just pushed the reply button not thinking that it won´t </I>get
&gt;<i> &gt; back
</I>&gt;<i> &gt; to the list but to your private e-mail account
</I>&gt;<i> </I>
&gt;<i> What we need to do is setup a class for packets going out on eth0 with </I>a dst
&gt;<i> address of the backend, and then limit that. CBQ doesn't know what an
</I>&gt;<i> eth0:110 is, it only knows that you have eth0, and that addresses have </I>been
&gt;<i> assigned to it. Try running &quot;ip addr show dev eth0&quot;, and you'll see
</I>&gt;<i> 192.168.10.17 with eth0, and not with eth0:110.
</I>&gt;<i> </I>
I did run &quot;ip addr show dev eth0&quot; the result was this:

2: eth0: &lt;BROADCAST,MULTICAST,PROMISC,UP&gt; mtu 1500 qdisc cbq qlen 100
    link/ether 00:01:02:07:5f:cf brd ff:ff:ff:ff:ff:ff
    inet 192.168.10.6/24 brd 192.168.255.255 scope global eth0
    inet 192.168.10.17/32 brd 192.168.255.255 scope global eth0:110  

so to me it looks like ..10.17 works with eth0:110 

&gt;<i> You can either mark packets leaving your host with the destination of y</I>our
&gt;<i> magic ip addresses, and you'll limit them all together to 200kbit, or y</I>ou
&gt;<i> can try to make more classes, one for each backend server, and select o</I>n the
&gt;<i> basis of the real mac address.
</I>&gt;<i> </I>
&gt;<i> Regards,
</I>&gt;<i> </I>
&gt;<i> bert hubert
</I>&gt;<i> </I>
&gt;<i> --
</I>&gt;<i> PowerDNS                     Versatile DNS Services
</I>&gt;<i> Trilab                       The Technology People
</I>&gt;<i> 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
</I>&gt;<i> </I>
&gt;<i> _______________________________________________
</I>&gt;<i> LARTC mailing list / <A HREF="mailto:LARTC@mailman.ds9a.nl">LARTC@mailman.ds9a.nl</A>
</I>&gt;<i> <A HREF="http://mailman.ds9a.nl/mailman/listinfo/lartc">http://mailman.ds9a.nl/mailman/listinfo/lartc</A> HOWTO: <A HREF="http://ds9a.nl/2.4=">http://ds9a.nl/2.4=</A>
</I>Routing/


</PRE>

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [LARTC] CBQ and load balancing
  2000-10-09 12:46 [LARTC] CBQ and load balancing joern
                   ` (2 preceding siblings ...)
  2000-10-10 13:42 ` joern
@ 2000-10-10 13:53 ` bert
  3 siblings, 0 replies; 5+ messages in thread
From: bert @ 2000-10-10 13:53 UTC (permalink / raw)
  To: lartc

<PRE>On Tue, Oct 10, 2000 at 12:36:36PM +0200, joern maier wrote:
&gt;<i> bert hubert wrote:
</I>&gt;<i> &gt; 
</I>&gt;<i> &gt; On Mon, Oct 09, 2000 at 04:32:58PM +0200, joern maier wrote:
</I>&gt;<i> &gt; &gt; o.k. here some more details I haven´t mentioned yet
</I>&gt;<i> &gt; 
</I>&gt;<i> &gt; Please keep it on the list, I don't like to give private advice, I want
</I>&gt;<i> &gt; everyone to benefit.
</I>&gt;<i> 
</I>&gt;<i> sorry -&gt; I just pushed the reply button not thinking that it won´t get
</I>&gt;<i> back
</I>&gt;<i> to the list but to your private e-mail account
</I>
What we need to do is setup a class for packets going out on eth0 with a dst
address of the backend, and then limit that. CBQ doesn't know what an
eth0:110 is, it only knows that you have eth0, and that addresses have been
assigned to it. Try running &quot;ip addr show dev eth0&quot;, and you'll see
192.168.10.17 with eth0, and not with eth0:110.

You can either mark packets leaving your host with the destination of your
magic ip addresses, and you'll limit them all together to 200kbit, or you
can try to make more classes, one for each backend server, and select on the
basis of the real mac address.

Regards,

bert hubert

-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet


</PRE>

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2000-10-10 13:53 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2000-10-09 12:46 [LARTC] CBQ and load balancing joern
2000-10-09 14:08 ` bert
2000-10-10 10:36 ` joern
2000-10-10 13:42 ` joern
2000-10-10 13:53 ` bert

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.