Re: altq on multiple interfaces

2013-10-09 Thread Leonardo Lombardo
Thanks for your reply Andy. What if I have: - multiple VLANs on an internal IF - have a limited bandwidth on external (say 10/10Mbit/s) and I want to share the external bandwidth among all VLANs giving some IPs (from different VLANs) each a bandwidth guarantee ? Sorry if I was not clear in my o

altq on multiple interfaces

2013-10-09 Thread Leonardo Lombardo
Hi all, is there a way to configure altq on multiple interfaces, sharing the same parameters (bandwidth, priorities, etc) ? If not, is there some other mechanism to obtain the same result ? Thanks for any suggestion. Leonardo

Shaping VLANs

2013-01-24 Thread Leonardo Lombardo
Hi all, my setup is a firewall/router for a network in which I have a lot of VLANs. WAN connection is only one so bandwith is a concern. WAN connection is 10Mbit/s. Is there a way to shape N VLANs as a whole while having some other VLAN with a minimum guarantee ? I mean: - N VLANs share the band

Maximum bandwidth per IP

2011-05-20 Thread Leonardo Lombardo
I see... I have to define a separate queue for each IP. But as far as i know I'd have to recompile the kernel in order to have as much queues as I need (more than 200). Don't you think I'd be nice to have something that helps in defining such things ? Maybe I'm approaching this problem the wron

Re: Minimum bandwidth per IP

2011-05-19 Thread Leonardo Lombardo
Hi, I think I was very unclear defining my requirements... I now try to explain it better ;-) Here is a snipper of my pf.conf (this machine is a bridge firewall): [...] table { 10.103.12.0/24, 10.113.14.0/24, 10.113.15.0/24, 10.113.16.0/24, 10.113.17.0/24, 10.113.18.0/24, 10.113.19.0/24, 10.1

Minimum bandwidth per IP

2011-05-19 Thread Leonardo Lombardo
Hi misc, is there a way, with PF on a router/fw machine, to assign a maximum bandwith on a per IP basis ? What I need to do is something like: given a table of IPs make sure that none of that IPs consumes more than n bandwidth. Something like the upperlimit of hfsc but on a per IP basis, witho

Re: network access controller like medusa ?

2010-07-16 Thread Leonardo Lombardo
You're right Michal, I try to make a better answer. Medusa is a software that can control switches so that the operator can manage vlan, routes and network access (and many other things) from a single control panel. Operator can assign bandwith and priority to vlans and can have some report ab

network access controller like medusa ?

2010-07-15 Thread Leonardo Lombardo
Hi all, do you know if there is any project/packet/something that runs on openbsd similar to this http://www.medusabusiness.com/overview.html ? I'm interested even to abandoned or uncomplete projects. Thanks for any advice ! Leonardo

hfsc service curve

2010-05-21 Thread Leonardo Lombardo
Hi all, can someone describe me exactly how hfsc service curve works ? I've tried playing with this parameter but with no success. I think if I specify something like upperlimit(x, n, y) then tcp connections that are in that queue will get at most x for n milliseconds and then y for the rest

Re: multipath and route-to

2010-03-09 Thread Leonardo Lombardo
Problem solved, that was my typo... So, for every newbie like me the answer is: route-to "takes precedence" over ecmp and you can manipulate routes from pf on a machine that has more than one route to a network. Thanks to all for the great work in this os and the support in this list.

Re: multipath and route-to

2010-03-08 Thread Leonardo Lombardo
Yes, but what I need is to have a static route for a specific client (src addr). Something like route -add -srchost 10.1.1.1 -host 151.1.150.16 192.168.2.254 Even if this is possible it would be quite difficult to mantain this "special" routes outside of pf.conf... On 08/03/2010 12.31, S

Re: multipath and route-to

2010-03-08 Thread Leonardo Lombardo
Il messaggio h stato controllato da ESET NOD32 Antivirus. www.nod32.it -- Dr. Leonardo Lombardo Via Colle pizzuto 71, 00044 Frascati (Roma) Mobile: 328 9424845 Fax:06 72650667

multipath and route-to

2010-03-04 Thread Leonardo Lombardo
Hi all, is there a way to force a route in pf, with route-to, on a machine that have multipath routing enabled ? I'm trying to configure a gateway with multipath routing with the possibility of assigning a fixed route for some clients. I can't find a way but to disable ecmp and do all the wor

openbsd box as gateway for multiple internet connections

2010-02-22 Thread Leonardo Lombardo
Hi all, I'm seraching for best practices, examples and documentation on how to build a openbsd gateway with multiple isp connections. the idea is simple: to have a gateway that load balances internet traffic from clients. it have to be faiulure tolerant, so that if a xDSL link fails, the gat

PF per-ip statistics

2009-11-18 Thread Leonardo Lombardo
Hi all, reading pfctl manpage I've seen this: # pfctl -t test -vTshow 129.128.5.191 Cleared: Thu Feb 13 18:55:18 2003 In/Block:[ Packets: 0Bytes: 0] In/Pass: [ Packets: 10 Byt