Firewall

[Peter Jeremy]

On 2007-Apr-30 10:58:18 +0100, Robert Watson <rwatson at freebsd.org> wrote:
>One of the big selling points of IPFW is integration with DUMMYNET, which 
>offers bandwidth management facilities not present in the other systems.

I thought altq(4) could also do most of what dummynet(4) does but
based on a closer look, it seems that it can't do the packet delay
stuff, though it seems to have fairly similar bandwidth management
facilities.

>is the main selling point for ipfw on my servers -- being able to rate 
>limit arbitrary IP addresses, port numbers, etc, both in terms of inbound 
>and outbound traffic is invaluable.

I extensively use dummynet at work to simulate WANs (bandwidth limited
and significant delays) between different servers in our models.  It
has proved invaluable for relicating field problems.

-- 
Peter Jeremy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20070430/87d7b203/attachment.pgp