61
17.7 Legacy Series / Re: Traffic shaper, should I see my rules in 'ipfw -a list'?
« on: October 30, 2017, 06:49:02 pm »
Seems to populate the correct ipfw rules in a VM, with basic interfaces, time to test LAGG/VLANs...
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
62
17.7 Legacy Series / Re: Traffic shaper, should I see my rules in 'ipfw -a list'?
« on: October 30, 2017, 03:02:56 pm »
Just in case it makes any difference, I have 4 physical interfaces, all grouped into an LACP lagg, VLANs then over the top for WAN, LAN, etc.
I guess I'll spin up a VM and see on a basic setup if the ipfw rules are populated, as I believe they should be.
I guess I'll spin up a VM and see on a basic setup if the ipfw rules are populated, as I believe they should be.
63
17.7 Legacy Series / Traffic shaper, should I see my rules in 'ipfw -a list'?
« on: October 30, 2017, 02:20:15 pm »
So, followed a few of the FQ_Codel guides on here, I believe I had it working on an earlier 17.7 release - on the current, 17.7.7_1 I don't seem to be able to.
Something I'd just like to clarify, presumably I should see the Rules/ueues that I configure in the Traffic Shaper section, in 'ipfw -a list'? I don't, if I should I can't for the life of me work out why. ipfw rules below:
I've follow the RickNY guide, below, multiple times, line for line, but I don't actually see any reduction in bufferbloat, nor in the downstream bandwidth (even if I set it to something stupidly low) suggesting something isn't matching.
https://forum.opnsense.org/index.php?topic=3758.0
Screenshot in the below post shows 'queue' rules in ipfw:
https://forum.opnsense.org/index.php?topic=4665.msg18072#msg18072
I don't seem to have these in my 'ipfw -a list' above, no matter what 'Rules' I configure in Firewall -> Traffic Shaper -> Settings -> Rules:
Something I'd just like to clarify, presumably I should see the Rules/ueues that I configure in the Traffic Shaper section, in 'ipfw -a list'? I don't, if I should I can't for the life of me work out why. ipfw rules below:
Code: [Select]
root@fw00:~ # ipfw -a list
00100 0 0 allow pfsync from any to any
00110 0 0 allow carp from any to any
00120 0 0 allow ip from any to any layer2 mac-type 0x0806,0x8035
00130 0 0 allow ip from any to any layer2 mac-type 0x888e,0x88c7
00140 0 0 allow ip from any to any layer2 mac-type 0x8863,0x8864
00150 0 0 deny ip from any to any layer2 not mac-type 0x0800,0x86dd
00200 0 0 skipto 60000 ip6 from ::1 to any
00201 44 9156 skipto 60000 ip4 from 127.0.0.0/8 to any
00202 0 0 skipto 60000 ip6 from any to ::1
00203 0 0 skipto 60000 ip4 from any to 127.0.0.0/8
01002 36 3560 skipto 60000 udp from any to 10.8.6.254 dst-port 53 keep-state
01002 117 13994 skipto 60000 ip from any to { 255.255.255.255 or 10.8.6.254 } in
01002 160 21192 skipto 60000 ip from { 255.255.255.255 or 10.8.6.254 } to any out
01002 0 0 skipto 60000 icmp from { 255.255.255.255 or 10.8.6.254 } to any out icmptypes 0
01002 0 0 skipto 60000 icmp from any to { 255.255.255.255 or 10.8.6.254 } in icmptypes 8
01003 0 0 skipto 60000 udp from any to 192.168.3.254 dst-port 53 keep-state
01003 0 0 skipto 60000 ip from any to { 255.255.255.255 or 192.168.3.254 } in
01003 0 0 skipto 60000 ip from { 255.255.255.255 or 192.168.3.254 } to any out
01003 0 0 skipto 60000 icmp from { 255.255.255.255 or 192.168.3.254 } to any out icmptypes 0
01003 0 0 skipto 60000 icmp from any to { 255.255.255.255 or 192.168.3.254 } in icmptypes 8
65535 9056022 8639833830 allow ip from any to anyI've follow the RickNY guide, below, multiple times, line for line, but I don't actually see any reduction in bufferbloat, nor in the downstream bandwidth (even if I set it to something stupidly low) suggesting something isn't matching.
https://forum.opnsense.org/index.php?topic=3758.0
Screenshot in the below post shows 'queue' rules in ipfw:
https://forum.opnsense.org/index.php?topic=4665.msg18072#msg18072
I don't seem to have these in my 'ipfw -a list' above, no matter what 'Rules' I configure in Firewall -> Traffic Shaper -> Settings -> Rules:
Code: [Select]
11 WAN ip 10.8.6.0/24 any DownQueue
21 WAN ip any 10.8.6.0/24 UpQueue 64
17.7 Legacy Series / Re: tcp (ACK) Rules In Traffic Shaper Not Working
« on: October 30, 2017, 02:08:50 pm »Does nobody seriously care, that the traffic shaper as is, cannot process ACK packets?
Side note, this specific firewall is currently unavailable, completely separate issue. Will post raw rules as soon as I get it back.
Your ipfw rules? Some rules? No rules?
I'm trying to troubleshoot something similar, I don't actually seem to see ANY of my traffic shaping rules in 'ipfw -a list', presumably I should?