I tried the following rules and had the same bad latency results for the corp site to remote site. Below are the rules I tried which gave the bad (avg. 350ms) latency: ----corp rules---- tc qdisc add dev ipsec0 handle 1: root cbq bandwidth 600kbit avpkt 1000 tc class add dev ipsec0 parent 1: classid 1:1 cbq bandwidth 240kbit avpkt 500 prio 1 rate 240kbit bounded isolated tc filter add dev ipsec0 parent 1:0 protocol ip prio 100 route tc filter add dev ipsec0 parent 1:0 protocol ip prio 1 u32 match ip dst 10.0.1.20 flowid 1:1 tc filter add dev ipsec0 parent 1:0 protocol ip prio 1 u32 match ip dst 10.0.1.21 flowid 1:1 tc filter add dev ipsec0 parent 1:0 protocol ip prio 1 u32 match ip dst 10.0.1.22 flowid 1:1 ----remote rules------ tc qdisc add dev ipsec0 handle 1: root cbq bandwidth 580kbit avpkt 1000 tc class add dev ipsec0 parent 1: classid 1:1 cbq bandwidth 240kbit avpkt 500 prio 1 rate 240kbit bounded isolated tc filter add dev ipsec0 parent 1:0 protocol ip prio 100 route tc filter add dev ipsec0 parent 1:0 protocol ip prio 1 u32 match ip dst 10.0.0.7 flowid 1:1 Any help would be greatly appreciated. -----Original Message----- From: Cezar Atanasiu [mailto:lartc@xxxxxx] Sent: Wednesday, December 03, 2003 7:37 AM To: lartc@xxxxxxxxxxxxxxx Subject: 2 internal nets, each one with its own provider Hi, and good evening, I encountered a quite weird problem yersterday evening, and I wonder if someone can explain the way of it. Anyway, there is goes : I have a client running two separate networks, NET-A (10.0.1.0/24) and NET-B (10.0.2.0/24) and two providers P-A, with gateway 192.168.0.1 and P-B with gateway 192.168.0.2. Now, as for the hardware part of it, there is one linux router hosting 4 ethernet cards on it, each connection having its on ethernet device, something like this : +-------------+ P-A eth0 | +------+-------+ eth2 | if1 | NET-A -------+ | | Linux router | eth3 | | NET-B -------+ if2 | | | +------+-------+ eth1 | +-------------+ P-B Hope you get the idea. As for the configuration, what I did was : setup 2 new routing tables, for P-A, and P-B, added the default gws to those tables, and setup 2 snat rules for the two networks in order to get each of them out on a separate provider. That does not seem to work, and I wonder if anyone has any idea why. Excuse me for the large email, and thankyou for your patience :) Cezar _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/