Package: fiaif Version: 1.21.1-2 Severity: important
Hi, After a FIAIF upgrade to the latest build, it seems that traffic shaping is a bit broken on my setup. My internet link is now limited to about 1Mbit(downlink) when fiaif is running (instead of 20Mbit). Here are the tc shaping rules under 1.20.x tc qdisc add dev ppp0 root handle 1: htb default 20 tc class add dev ppp0 parent 1: classid 1:1 htb rate 846kbit burst 20k tc class add dev ppp0 parent 1:1 classid 1:10 htb rate 423kbit ceil 846kbit burst 10K prio 1 tc class add dev ppp0 parent 1:1 classid 1:20 htb rate 253kbit ceil 846kbit burst 3k prio 2 tc class add dev ppp0 parent 1:1 classid 1:30 htb rate 169kbit ceil 846kbit burst 2k prio 3 tc qdisc add dev ppp0 parent 1:10 handle 10: pfifo limit 5 tc qdisc add dev ppp0 parent 1:20 handle 20: sfq perturb 10 tc qdisc add dev ppp0 parent 1:30 handle 30: sfq perturb 10 tc filter add dev ppp0 parent 1: protocol ip prio 10 u32 match ip tos 0x10 0xff flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 10 u32 match ip protocol 1 0xff flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 20 u32 match ip protocol 6 0xff match u8 0x05 0x0f at 0 match u16 0x0000 0xffc0 at 2 match u8 0x10 0xff at 33 flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 30 u32 match ip tos 0x08 0xff flowid 1:30 tc filter add dev ppp0 parent 1: protocol ip prio 40 u32 match ip dst 0.0.0.0/0 flowid 1:20 tc qdisc add dev ppp0 handle ffff: ingress tc filter add dev ppp0 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 22500kbit burst 10k drop flowid :1 Here are the tc shaping rules under 1.21.x tc qdisc add dev ppp0 root handle 1: htb default 20 tc class add dev ppp0 parent 1: classid 1:1 htb rate 846kbit mpu 64 mtu 1500 overhead 0 quantum 1500 burst 300b cburst 1500b tc class add dev ppp0 parent 1:1 classid 1:10 htb rate 423kbit ceil 846kbit prio 2 mpu 64 mtu 1500 overhead 0 quantum 1500 burst 300b cburst 1500b tc class add dev ppp0 parent 1:1 classid 1:20 htb rate 253kbit ceil 803kbit prio 3 mpu 64 mtu 1500 overhead 0 quantum 1500 burst 300b cburst 1500b tc class add dev ppp0 parent 1:1 classid 1:30 htb rate 169kbit ceil 803kbit prio 4 mpu 64 mtu 1500 overhead 0 quantum 1500 burst 300b cburst 1500b tc qdisc add dev ppp0 parent 1:10 handle 10: pfifo tc qdisc add dev ppp0 parent 1:20 handle 20: sfq perturb 10 tc qdisc add dev ppp0 parent 1:30 handle 30: sfq perturb 10 tc filter add dev ppp0 parent 1: prio 3 protocol ip u32 match ip tos 0x68 0xff flowid 1:10 tc filter add dev ppp0 parent 1: prio 4 protocol ip u32 match ip tos 0xb8 0xff flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 10 u32 match ip tos 0x10 0xff flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 20 u32 match ip protocol 6 0xff match u8 0x05 0x0f at 0 match u16 0x0000 0xffc0 at 2 flowid 1:10 tc filter add dev ppp0 parent 1: protocol ip prio 30 u32 match ip tos 0x08 0xff flowid 1:30 tc filter add dev ppp0 parent 1: protocol ip prio 40 u32 match ip dst 0.0.0.0/0 flowid 1:20 tc qdisc add dev ppp0 handle ffff: ingress tc filter add dev ppp0 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 21250kbit burst 5k drop flowid :1 I had to add an explicit HFSC statement in my zone.ext file to get things back tc qdisc add dev ppp0 root handle 1: hfsc default 22 tc class add dev ppp0 parent 1: classid 1:10 hfsc ls rate 705kbit ul rate 705kbit tc class add dev ppp0 parent 1:10 classid 1:11 hfsc rt umax 1500b dmax 20ms rate 128kbit ls rate 352kbit ul rate 705kbit tc class add dev ppp0 parent 1:10 classid 1:20 hfsc ls rate 352kbit ul rate 641kbit tc class add dev ppp0 parent 1:20 classid 1:21 hfsc rt umax 1500b dmax 50ms rate 64kbit ls rate 423kbit ul rate 705kbit tc class add dev ppp0 parent 1:20 classid 1:22 hfsc ls rate 211kbit ul rate 705kbit tc class add dev ppp0 parent 1:20 classid 1:23 hfsc ls rate 70kbit ul rate 669kbit tc qdisc add dev ppp0 parent 1:11 handle 11: pfifo limit 10 tc qdisc add dev ppp0 parent 1:21 handle 21: sfq perturb 10 tc qdisc add dev ppp0 parent 1:22 handle 22: sfq perturb 10 tc qdisc add dev ppp0 parent 1:23 handle 23: sfq perturb 10 tc filter add dev ppp0 parent 1: prio 3 protocol ip u32 match ip tos 0x68 0xff flowid 1:11 tc filter add dev ppp0 parent 1: prio 4 protocol ip u32 match ip tos 0xb8 0xff flowid 1:11 tc filter add dev ppp0 parent 1: protocol ip prio 10 u32 match ip tos 0x10 0xff flowid 1:21 tc filter add dev ppp0 parent 1: protocol ip prio 30 u32 match ip tos 0x08 0xff flowid 1:23 tc filter add dev ppp0 parent 1: protocol ip prio 40 u32 match ip dst 0.0.0.0/0 flowid 1:22 tc qdisc add dev ppp0 handle ffff: ingress tc filter add dev ppp0 parent ffff: protocol ip prio 100 u32 match ip tos 0x68 0xff police rate 128kbit buffer 10k continue flowid :1 tc filter add dev ppp0 parent ffff: protocol ip prio 105 u32 match ip tos 0xb8 0xff police rate 128kbit buffer 10k continue flowid :1 tc filter add dev ppp0 parent ffff: protocol ip prio 110 u32 match ip protocol 1 0xff police rate 2kbit buffer 1k continue flowid :1 tc filter add dev ppp0 parent ffff: protocol ip prio 115 u32 match ip protocol 6 0xff match u8 0x05 0x0f at 0 match u16 0x0000 0xffc0 at 2 police rate 2kbit buffer 1k continue flowid :1 tc filter add dev ppp0 parent ffff: protocol ip prio 120 u32 match ip src 0.0.0.0/0 police rate 20000kbit mtu 1500 burst 10k drop flowid :1 Maybe a bug in my setup, or syntax since the hfsc change. Laurent -- Package-specific info: -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.20.1-a7n-v1 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages fiaif depends on: hi bash 3.1dfsg-8 The GNU Bourne Again SHell hi coreutils 5.97-5.3 The GNU core utilities ii cron 3.0pl1-100 management of regular background p ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy ii debianutils 2.17.5 Miscellaneous utilities specific t ii dnsutils 1:9.3.4-2 Clients provided with BIND ii grep 2.5.1.ds2-6 GNU grep, egrep and fgrep ii iptables 1.3.6.0debian1-5 administration tools for packet fi ii logtail 1.2.54 Print log file lines that have not ii net-tools 1.60-17 The NET-3 networking toolkit ii sed 4.1.5-1 The GNU sed stream editor hi wget 1.10.2-2 retrieves files from the web fiaif recommends no packages. -- debconf information: fiaif/cron_logfile: * fiaif/warning: * fiaif/enable_cron: false * fiaif/enable_initd: true -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
