[LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Alexandra Alvarado]

Hello, i have a very big problem, i hope somebody solve my problem, when
i configure cbq it works fine but when i executed ping it turns to slow,
I NEED the PING and TRACEROUTE works so fast, how can i do that?.


Thanks


Alexandra

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[David A. Bandel]

Alexandra Alvarado wrote:
> 
> Hello, i have a very big problem, i hope somebody solve my problem, when
> i configure cbq it works fine but when i executed ping it turns to slow,
> I NEED the PING and TRACEROUTE works so fast, how can i do that?.
> 

for traceroute, try: traceroute -n <Target>

pings will be slow if the pipe is clogged, not much you can do about
it.  If you just mean it's slow to start, that's the initial DNS
lookup.  If you mean after the DNS lookup, the normally induced latency
is a rather direct measure of how clogged the pipe is.

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
		-- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Ramin Alidousti]

I think David is correct. DNS can be the cause of your long delays,
specially with traceroute.

You could also asign a higher periority to your traceroute and ping
packets but then you'll lose the purpose of these tools...

Why do you need ping and traceroute to work fast?

Ramin

On Wed, May 02, 2001 at 08:13:57PM -0500, David A. Bandel wrote:

> Alexandra Alvarado wrote:
> > 
> > Hello, i have a very big problem, i hope somebody solve my problem, when
> > i configure cbq it works fine but when i executed ping it turns to slow,
> > I NEED the PING and TRACEROUTE works so fast, how can i do that?.
> > 
> 
> for traceroute, try: traceroute -n <Target>
> 
> pings will be slow if the pipe is clogged, not much you can do about
> it.  If you just mean it's slow to start, that's the initial DNS
> lookup.  If you mean after the DNS lookup, the normally induced latency
> is a rather direct measure of how clogged the pipe is.
> 
> Ciao,
> 
> David A. Bandel
> -- 
> Focus on the dream, not the competition.
> 		-- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re[2]: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Fabian Gervan]

Hello Alexandra,

Thursday, May 03, 2001, 10:32:35 AM, you wrote:

AA> Well, 

AA> I work for an ISP Company that sells the Internet Service to a Cybers,
AA> in each cybers we install a linux firewall with 2 network cards between
AA> the internet and the intranet, and the clients says the the conection
AA> has a problem because they execute a ping since an intranet machine
AA> [inside the firewall] to our MAIN ROUTER [out of my firewall] and they
AA> obtain as results "time out" or "times in seconds and must be in micro
AA> seconds or miliseconds".

Why you don't try to create an class with high rate that filter packet to your router
 only? (rule=,1.2.3.4)
This class must be set before yout 64kbit class.
I use class with high rates filtering isp access (mail, ftp server,
etc).
 
Regards,

Fabian Gervan
InterK Wireless



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Alexandra Alvarado]

Well, 

I work for an ISP Company that sells the Internet Service to a Cybers,
in each cybers we install a linux firewall with 2 network cards between
the internet and the intranet, and the clients says the the conection
has a problem because they execute a ping since an intranet machine
[inside the firewall] to our MAIN ROUTER [out of my firewall] and they
obtain as results "time out" or "times in seconds and must be in micro
seconds or miliseconds".

Obviously this occur when I configure the cbq [64Kbit], when i turn cbq
off all is ok, BUT I NEED CONTROL THE BANDWITH all traffic minus the
ping service.

That is the reason why I need that the ping service not be controlled
[or be prioritized], FOR THE CLIENTS, can you give me a good example for
that? :)

Thanks

Alexandra

"David A. Bandel" wrote:
> 
> Alexandra Alvarado wrote:
> >
> > Hello, i have a very big problem, i hope somebody solve my problem, when
> > i configure cbq it works fine but when i executed ping it turns to slow,
> > I NEED the PING and TRACEROUTE works so fast, how can i do that?.
> >
> 
> for traceroute, try: traceroute -n <Target>
> 
> pings will be slow if the pipe is clogged, not much you can do about
> it.  If you just mean it's slow to start, that's the initial DNS
> lookup.  If you mean after the DNS lookup, the normally induced latency
> is a rather direct measure of how clogged the pipe is.
> 
> Ciao,
> 
> David A. Bandel
> --
> Focus on the dream, not the competition.
>                 -- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Alexandra Alvarado]

Thanks for try to help me, i apprecite so much this.


Well

this is my cbq.init configuration, how can modify this to priorize ICMP
packets [ping service]


Thanks

Alexandra

#!/bin/sh

DEV="dev eth1"
TTOPIC 7.100.136.194
MORTEG 7.100.136.208
MCADEN 7.100.136.233
KLAPEN 7.100.136.199
JSABAN 7.100.136.201
OTHERS 7.100.136.0/24

tc qdisc add $DEV root handle 10: cbq bandwidth 100Mbit avpkt 1000

tc class add $DEV parent 10:0 classid 10:1 cbq bandwidth 100Mbit rate
100Mbit allot 1514 weight 10Mbit prio 8 maxburst 20 avpkt 1000

tc class add $DEV parent 10:1 classid 10:100 cbq bandwidth 100Mbit rate
128Kbit allot 1514 weight 12Kbit prio 5 maxburst 20 avpkt 1000 bounded

tc class add $DEV parent 10:100 classid 10:1000 cbq bandwidth 128Kbit
rate 16Kbit allot 1514 weight 1Kbit prio 1 maxburst 20 avpkt 1000
bounded
tc class add $DEV parent 10:100 classid 10:2000 cbq bandwidth 128Kbit
rate 16Kbit allot 1514 weight 1Kbit prio 2 maxburst 20 avpkt 1000
bounded
tc class add $DEV parent 10:100 classid 10:3000 cbq bandwidth 128Kbit
rate 8Kbit allot 1514 weight 1Kbit prio 3 maxburst 20 avpkt 1000 bounded
tc class add $DEV parent 10:100 classid 10:4000 cbq bandwidth 128Kbit
rate 8Kbit allot 1514 weight 1Kbit prio 4 maxburst 20 avpkt 1000 bounded
tc class add $DEV parent 10:100 classid 10:5000 cbq bandwidth 128Kbit
rate 8Kbit allot 1514 weight 1Kbit prio 4 maxburst 20 avpkt 1000 bounded
tc class add $DEV parent 10:100 classid 10:6000 cbq bandwidth 128Kbit
rate 84Kbit allot 1514 weight 1Kbit prio 5 maxburst 20 avpkt 1000
bounded

tc qdisc add $DEV parent 10:1000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb
tc qdisc add $DEV parent 10:2000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb
tc qdisc add $DEV parent 10:3000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb
tc qdisc add $DEV parent 10:4000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb
tc qdisc add $DEV parent 10:5000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb
tc qdisc add $DEV parent 10:6000 tbf rate 16Kbit buffer 10Kb/8 limit
15Kb

tc filter add $DEV parent 10:0 protocol ip prio 25 u32 match ip dst
$TTOPIC flowid 10:1000
tc filter add $DEV parent 10:0 protocol ip prio 25 u32 match ip dst
$MORTEG flowid 10:2000
tc filter add $DEV parent 10:0 protocol ip prio 100 u32 match ip dst
$MCADEN flowid 10:3000
tc filter add $DEV parent 10:0 protocol ip prio 100 u32 match ip dst
$KLAPEN flowid 10:4000
tc filter add $DEV parent 10:0 protocol ip prio 100 u32 match ip dst
$JSABAN flowid 10:5000
tc filter add $DEV parent 10:0 protocol ip prio 100 u32 match ip dst
$OTHERS flowid 10:6000


"Wingtung.Leung" wrote:
> 
> On Thu, 3 May 2001, Alexandra Alvarado wrote:
> 
> > Obviously this occur when I configure the cbq [64Kbit], when i turn cbq
> > off all is ok, BUT I NEED CONTROL THE BANDWITH all traffic minus the
> > ping service.
> >
> > That is the reason why I need that the ping service not be controlled
> > [or be prioritized], FOR THE CLIENTS, can you give me a good example for
> > that? :)
> 
> It depends how you select your pakkets for putting in the bandwidth
> limited queues. Just don't mark the ICMP packets or adjust the filter
> so they have enough bandwidth. Or create a seperate class for ICMP
> messages.
> 
> Please be more specific ..
> 
> --
> CAPS = SHOUTING = (maybe) impolite
> 
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] HOW CAN I PRIORITIZE THE ICMP PACKETS

[Wingtung.Leung]

On Thu, 3 May 2001, Alexandra Alvarado wrote:

> Obviously this occur when I configure the cbq [64Kbit], when i turn cbq
> off all is ok, BUT I NEED CONTROL THE BANDWITH all traffic minus the
> ping service.
>
> That is the reason why I need that the ping service not be controlled
> [or be prioritized], FOR THE CLIENTS, can you give me a good example for
> that? :)

It depends how you select your pakkets for putting in the bandwidth
limited queues. Just don't mark the ICMP packets or adjust the filter
so they have enough bandwidth. Or create a seperate class for ICMP
messages.

Please be more specific ..


--
CAPS = SHOUTING = (maybe) impolite


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/