Re: New PF questions....
Chris Zakelj <c.zakelj <at> ieee.org>
2004-11-01 05:38:35 GMT
Dawid Zabrocki wrote:
> http://www-2.cs.cmu.edu/~hzhang/HFSC/main.html (second match at google)
> http://www-2.cs.cmu.edu/~hzhang/HFSC/TALK/sld040.htm (see slides 40-45)
>
> i don't know more than it says there , never tried myself
These also gave me the feeling that HFSC is a sort of CBQ on steroids...
perhaps best suited to tasks such as VoIP routers or backbone
aggregators, where each ISP is granted guaranteed bandwidth?
>> 2. ACK prioritization... The user's guide always uses 'flags S/SA'
>> to identify which packets should go out first, but the man page
>> implies that this statement means SYN set, ACK unset, don't care on
>> the rest. To me, that suggests that initial SYN packets are placed
>> into the queue, but ACK packets aren't (which defeats the whole
>> purpose, but goes against my -vvsq observations). Again, the cry of
>> "What am I missing?"
>
> you are right , but in those examples it's about what pass what not
> ... not which packet put in which queue for prioretization ...
>
> man pf.conf:
> "pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio)"
> "Packets can be assigned to queues based on filter rules by using the
> queue keyword. Normally only one queue is specified; when a second one
> is specified it will instead be used for packets which have a TOS of
> lowdelay and for TCP ACKs with no data payload."
>
> when u use "flags S/SA" (for ex. pass out proto tcp all flags S/SA
(Continue reading)