From: Andrei Ivanov <andrei.ivanov@ines.ro>
To: linux-kernel@vger.kernel.org
Subject: ingress rate limiting weirdness (?)
Date: Fri, 13 Sep 2002 18:01:16 +0300 (EEST) [thread overview]
Message-ID: <Pine.LNX.4.44.0209131724060.6388-200000@webdev.ines.ro> (raw)
[-- Attachment #1: Type: TEXT/PLAIN, Size: 957 bytes --]
Hello,
I've been trying to rate limit my incomming connections, and, as I
understand, I can do that only with ingress.
So I did a litle test:
tc qdisc add dev eth1 handle ffff: ingress
tc filter add dev eth1 protocol ip parent ffff: prio 50 u32 match ip src \
204.152.189.116 police rate 128kbit burst 10k drop flowid :1
tc qdisc list dev eth1
qdisc ingress ffff: ----------------
tc filter ls dev eth1 parent ffff:
filter protocol ip pref 50 u32
filter protocol ip pref 50 u32 fh 800: ht divisor 1
filter protocol ip pref 50 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid :1
match cc98bd74/ffffffff at 12
The outside interface is eth1.
After I do this, any connection to ftp.kernel.org doesn't work.
Attached is a dump of a connection try to ftp.kernel.org.
Am I doing something wrong here or the problem comes from somewhere else ?
Distrib: gentoo
Kernel ver: 2.4.20-pre6
iproute-20010824 (also tried with iproute2-2.4.7-now-ss020116-try)
[-- Attachment #2: trace dump --]
[-- Type: TEXT/plain, Size: 2025 bytes --]
17:55:00.886213 myhost.ines.ro.32979 > zeus-pub.kernel.org.ftp: S 1048248596:1048248596(0) win 5840 <mss 1460,sackOK,timestamp 8304274 0,nop,wscale 0> (DF)
17:55:01.089198 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845539810 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:03.885800 myhost.ines.ro.32979 > zeus-pub.kernel.org.ftp: S 1048248596:1048248596(0) win 5840 <mss 1460,sackOK,timestamp 8304574 0,nop,wscale 0> (DF)
17:55:04.089407 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845540110 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:05.245283 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845540226 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:09.885767 myhost.ines.ro.32979 > zeus-pub.kernel.org.ftp: S 1048248596:1048248596(0) win 5840 <mss 1460,sackOK,timestamp 8305174 0,nop,wscale 0> (DF)
17:55:10.088104 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845540710 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:11.247320 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845540826 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:21.885699 myhost.ines.ro.32979 > zeus-pub.kernel.org.ftp: S 1048248596:1048248596(0) win 5840 <mss 1460,sackOK,timestamp 8306374 0,nop,wscale 0> (DF)
17:55:22.087007 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845541910 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
17:55:23.247241 zeus-pub.kernel.org.ftp > myhost.ines.ro.32979: S 1036164005:1036164005(0) ack 1048248597 win 5792 <mss 1460,sackOK,timestamp 845542026 8304274,nop,wscale 0> (DF) [tos 0x62,ECT(0)]
next reply other threads:[~2002-09-13 14:56 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-09-13 15:01 Andrei Ivanov [this message]
2002-09-13 18:16 ` Andrei Ivanov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.44.0209131724060.6388-200000@webdev.ines.ro \
--to=andrei.ivanov@ines.ro \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®