pfctl: ix0: driver does not support altq

2016-08-18 Thread Radek Krejča
Hello, I have 10.3 RELEASE and I am still trying possibilities with 10G together with pf. There is another problem, driver doesnt support ALTQ, is there any chance for this support? ix0: mem 0xfbc0-0xfbdf,0xfbe04000-0xfbe07fff irq 11 at device 0.0 on pci4 ix0: Using MSIX interrupts

RE: How to set tos to 0

2016-08-10 Thread Radek Krejča
> On 31 Jul 2016, at 19:46, Radek Krejča wrote: > > I need to set TOS to 0 and remark it with rules. > > > > I am trying to use scrub to set tos to 0, but I have problem: > > > > scrub all fragment reassemble no-df set-tos 0 > > > > give Illegal value

RE: Max altq bandwidth 4.26 Gbit

2016-08-10 Thread Radek Krejča
> Please do file a bug, because you’ve discovered a real problem and > I’d hate for it to get forgotten about. Hello Kristof, bug sended. Thank you very much Radek ___ freebsd-pf@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/fre

RE: Max altq bandwidth 4.26 Gbit

2016-08-10 Thread Radek Krejča
> I’d expect that ‘altq on $int_if cbq bandwidth 85% queue { > default_nat.’ would do what you want. > Looking at the code, I’m not at all sure that it’ll end up working > either, but it’s worth a try. > > Fundamentally, we’ll have to change pf (and worse, the interface to > user space) to

RE: Max altq bandwidth 4.26 Gbit

2016-08-10 Thread Radek Krejča
> That looks like you might be hitting the maximum of an unsigned > integer. > Try using relative specifications (i.e. as a percentage) instead. > Hello Kristof, Yes, I think so. But I dont know, that I can say relative specification for inteface bandwidth. Could you show me how? I have 10Gb

Max altq bandwidth 4.26 Gbit

2016-08-10 Thread Radek Krejča
Hello again, I need to shape 10G traffic, but I cant make bandwidth higher than 4.26 Gbit: pfctl shows: altq on int0 cbq bandwidth 4.26Gb tbrsize 36000 queue { default_nat.. but in pf.conf is: altq on $int_if cbq bandwidth 8550Mb queue { default_nat.. or altq on $int_if

How to set tos to 0

2016-07-31 Thread Radek Krejča
Hello, I need to set TOS to 0 and remark it with rules. I am trying to use scrub to set tos to 0, but I have problem: scrub all fragment reassemble no-df set-tos 0 give Illegal value but scrub all fragment reassemble no-df set-tos 1 is working. I am trying 0x00, 0x0 and still the same. How c

RE: Traffic shaping incomming traffic for all vlans

2016-05-19 Thread Radek Krejča
on $ext_if proto { tcp, udp } from 192.168.52.0/24 > Why? Is there any nat rule? > > And second problem - how to set up (on which interface) altq queues? You should use outgoing interface. Hello, there is relevant part of my pf.conf ext_if = "ext0" int_if = "int0"

Traffic shaping incomming traffic for all vlans

2016-05-19 Thread Radek Krejča
Hello, I have freebsd router with pf for NAT and firewall. There are 2 NICs, one for incomming traffic from internet and second for traffic to clients. On internal NIC are a lot of vlans. I need to make traffic shaping for all users based on src ip from internet. But I have problem, it doesnt

peer address over pf rdr

2013-04-18 Thread Radek Krejča
Hello, I need to get in some cases ip address of our customer over nat to my www page (eg. for stopping spam and give our customer info). I wrote daemon which listen on port where is traffic of our customers redirected (this is my testing rule): rdr proto tcp from 192.168.255.2 to any port 800