[Gllug] traffic shapping

Leandro Stasi lstasi at onetel.com
Fri May 23 18:44:24 UTC 2003


Still, why do you want to slow down the incomming traffic?

Which traffic is enter you box that you don't want there?

If you want to slow down traffic that goes thru the box you have to shape
the Internal ( LAN ) interface insted the DialUP.
try this http://polip.sourceforge.net

If you still want to stop traffic going to the box, it is call policing not
shaping, which consist in droping packets as soon they enter the box
according some rule.

----- Original Message -----
From: "Jonathan Dye" <jonathan.dye at automationpartnership.com>
To: <gllug at linux.co.uk>
Sent: Friday, May 23, 2003 10:30 AM
Subject: RE: [Gllug] traffic shapping


> Alistair Mann wrote:
> > Thus spaketh Jonathan Dye on Wednesday 21 May 2003 1:11 pm:
> >> I'm trying to set up some traffic shaping on my dial up connection
> >> to limit the speed of incoming packets
> >
> > Stop right there. There is no traffic-shaping solution anywhere that
> > can help you to shape /incoming/ traffic. By definition, traffic
> > cannot be shaped until it has already arrived, by which time, your
> > dialup line has already been swamped.
> >
> > You can shape through-traffic at a firewall; you can shape how fast
> > outbound traffic, but you can't shape incoming traffic. So, for
> > instance, you can limit outbound traffic from your webserver to
> > 2.5kb/s; you can limit your colleague's kazaa client to 5% of total
> > bandwidth; but you can't stop being 'slashdotted' and 'farked'
> > because 5,000 people are all trying to connect to your machine at the
> > same time.
> >
> > So, if shaping incoming is what you are really trying to do, I hope
> > that clears up why your script couldn't ever work.
>
> OK, I'm trying to use the ingress filter to limit the rate at which
packets
> enter the routing system on my firewall box.  I am hoping that in turn
this
> will limit the rate at which traffic arrives at my external interface due
to
> the corresponding slowdown in the ACKs returned to the sending machines.
>
> JD
>
> _____________________________________________________________________
> This message has been checked for all known viruses by the
> MessageLabs Virus Scanning Service
>
>
> --
> Gllug mailing list  -  Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug



-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list