Re: Packet rate limiter

2007-02-07 Thread Justin Robertson
Newp. You're stuck to good old bps with ipfw or bps/cpse (connections per second established) with pf. The other method would be to use cisco netflow export data from a router being polled - then limiting traffic with one of the methods mentioned above... or just place pps limits on your router

Re: 6.x, 4.x ipfw/dummynet pf/altq - network performance issues

2007-02-06 Thread Justin Robertson
. :-\ Julian Elischer wrote: Justin Robertson wrote: Err, forgot to reply to -net, at anyrate, layer 2 isn't useful as it doesn't undertand ip addresses, ports, protocols, etc. filtereing at the NIC (sysctl net.link.ether.ipfw=1 or something similar) lets you do layer 3 filtereing at the

Re: 6.x, 4.x ipfw/dummynet pf/altq - network performance issues

2007-02-06 Thread Justin Robertson
Err, forgot to reply to -net, at anyrate, layer 2 isn't useful as it doesn't undertand ip addresses, ports, protocols, etc. Julian Elischer wrote: Justin Robertson wrote: Splitting the task into a transparent filtering bridge with a separate routing box appears to clear it u

6.x, 4.x ipfw/dummynet pf/altq - network performance issues

2007-02-06 Thread Justin Robertson
It was suggested I post this to freebsd-net rather than isp and questions to get a different caliber of replies, here goes; I've been running some tests with using FreeBSD to filter and rate limit traffic. My first thoughts were to goto the latest stable release, which was 6.1 at the time.