ipfw bandwidth limit

Markus Kovero markus.kovero at grafikansi.fi
Sat Feb 14 05:19:27 PST 2004


I've got 172.16.0.0/24 network that is connected to internet via vpn gre
tunnel.
And now I've had bit hard time doing bandwidth control, maybe I'm missing
something.

I've set ipfw pipes like this:
ipfw add queue 1 gre from any to 172.16.0.0/24
ipfw queue 1 config weight 5 pipe 2 mask dst-ip 0x000000ff
ipfw pipe 2 config bw 1500Kbit/s
ipfw add queue 2 gre from 172.16.0.0/24 to any
ipfw queue 2 config weight 20 pipe 3 mask src-ip 0x000000ff
ipfw pipe 3 config bw 256Kbit/s

net.inet.ip.fw.one_pass: 0

65100 queue 1 gre from any to 172.16.0.0/24
65200 queue 2 gre from 172.16.0.0/24 to any

00002:   1.500 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
00003: 256.000 Kbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
q00001: weight 5 pipe 2   50 sl. 0 queues (64 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x000000ff/0x0000
q00002: weight 20 pipe 3   50 sl. 0 queues (64 buckets) droptail
    mask: 0x00 0x000000ff/0x0000 -> 0x00000000/0x0000

It seems to have no effect on network. What I'm missing?
(replacing gre-protocol with ip doesn't help)

Markus Kovero



More information about the freebsd-questions mailing list