I've had some trouble getting ipfw to behave as expected. I've got a ipfw box sitting as a firewall and traffic shaper in bridge mode. It's working great for the most part but I'm having trouble getting some specific behavior to work right.
I'm currently limiting all outbound streams to 1.5mbits, and this works great. However, I'd also like to setup an overall cap for all traffic to run at 25mbits. I can only get one or the other of these rule/pipe combos to take affect at any given time. I must be missing something obvious: The rules in questions are as follows: add 420 pipe 420 tcp from $slb_www 80 to any pipe 420 config bw 1500Kbit/s queue 35 mask dst-ip 0xffffffff buckets 1024 add 440 pipe 440 tcp from $slb_www 80 to any pipe 440 config bw 25Mbit/s queue 100 'ipfw show' shows zero hits on rule 440, it sure seems like it should work. Also, is it possible to increase the hash table size beyond 1024? Practically speaking, does anyone have any experience doing trafic shapping at gige rates? The property behind this box is growing rapidly and we expect to saturate fe in a few month. I'd appreciate if you could cc me in response. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net, inc. System Administrator 2260 Apollo Way 707.522.1000 (Voice) Santa Rosa, CA 95407 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = D5F9 667F 5D32 7347 0B79 8DB7 2B42 86B6 4E2C 3896 _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
