Re: Weird quirk with ingress policing

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



That is normal, policers do not share bandwich, they simply drop packets on
match randomly.
Probably you are already using index feature.

I checked policer source code, and cant understand anything at all,
probabaly everyhing is in other modules.
>From that little what I could understand, seems that index means sharing
some parts of data.
probably rate counters, this is quite logical, but than I dont undestand its
behavior,
each policer should see sum of rates, but match on its own rate.

In practice it seems to ignore its own rate and match on sum of rates all at
once
so that one which packet exceed sum of trates will drop its packet.
Maybe you could check if it is corerct?
Since it is hard to believe that policer is intended to work in such way so.

I dont think policers are capable to divide trafic in fair way, they work as
simple one fifo.
(all policers as single fifo at once)


----- Original Message ----- 
From: "David McNab" <david@xxxxxxxxxxxxxxxx>
To: <lartc@xxxxxxxxxxxxxxx>
Sent: Sunday, March 14, 2004 1:11 PM
Subject:  Weird quirk with ingress policing


> Hi,
>
> I notice that if two or more existing connections match an ingress
> policing filter, the input bandwidth does not get evenly divided up
> between the n connections.
>
> Kinda like litters of baby animals, where the stronger babies get more
> access to the mothers teats and grow up bigger and faster than their
> siblings.
>
> The only workaround that's working for me is to set explicit ingress
> policing filters, which match src and dest host and port, so for each
> filter there can only be exactly one connection which matches. Then,
> it's just a matter of evenly dividing up the allocated total input bw
> amongst these n processes. This works, but it's not exactly optimal.
>
> -- 
>
> Kind regards
> David
>
> --
>
> leave this line intact so your email gets through my junk mail filter
> _______________________________________________
> LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>

_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux