simple_traffic_shaping.xml (shorewall-docs-xml-5.2.7.tar.bz2) | : | simple_traffic_shaping.xml (shorewall-docs-xml-5.2.8.tar.bz2) | ||
---|---|---|---|---|
skipping to change at line 96 | skipping to change at line 96 | |||
for an external interface) or all traffic being sent | for an external interface) or all traffic being sent | |||
<emphasis>to</emphasis> a given IP address (internal interface).</para> | <emphasis>to</emphasis> a given IP address (internal interface).</para> | |||
<para>Finally, Simple Traffic Shaping allows you to set a limit on the | <para>Finally, Simple Traffic Shaping allows you to set a limit on the | |||
total bandwidth allowed out of an interface. It does this by inserting a | total bandwidth allowed out of an interface. It does this by inserting a | |||
Token Bucket Filter (tbf) qdisc ahead of the prio qdisc. Note that this | Token Bucket Filter (tbf) qdisc ahead of the prio qdisc. Note that this | |||
can have the effect of defeating the priority queuing provided by the prio | can have the effect of defeating the priority queuing provided by the prio | |||
qdisc but seems to provide a benefit when the actual link output | qdisc but seems to provide a benefit when the actual link output | |||
temporarily drops below the limit imposed by tbf or when tbf allows a | temporarily drops below the limit imposed by tbf or when tbf allows a | |||
burst of traffic to be released.</para> | burst of traffic to be released.</para> | |||
<caution> | ||||
<para>IPSec traffic passes through traffic shaping twice - once en clair | ||||
and once encrypted and encapsulated. As a result, throughput may be | ||||
significantly less than configured if IPSEC packets form a significant | ||||
percentage of the traffic being shaped.</para> | ||||
</caution> | ||||
</section> | </section> | |||
<section> | <section> | |||
<title>Enabling Simple Traffic Shaping</title> | <title>Enabling Simple Traffic Shaping</title> | |||
<para>Simple traffic shaping is enabled by setting TC_ENABLED=Simple in | <para>Simple traffic shaping is enabled by setting TC_ENABLED=Simple in | |||
<ulink url="manpages/shorewall.conf.html">shorewall.conf</ulink>(5). You | <ulink url="manpages/shorewall.conf.html">shorewall.conf</ulink>(5). You | |||
then add an entry for your external interface to <ulink | then add an entry for your external interface to <ulink | |||
url="manpages/shorewall-tcinterfaces.html">shorewall-tcinterfaces</ulink>(5) | url="manpages/shorewall-tcinterfaces.html">shorewall-tcinterfaces</ulink>(5) | |||
(<filename>/etc/shorewall/tcinterfaces</filename>).</para> | (<filename>/etc/shorewall/tcinterfaces</filename>).</para> | |||
End of changes. 1 change blocks. | ||||
0 lines changed or deleted | 7 lines changed or added |