Tweak TC article

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-07-13 15:34:54 +00:00
parent 3b15b68a8a
commit 2b5826701f

View File

@ -183,13 +183,16 @@
</blockquote></para> </blockquote></para>
<para><emphasis role="bold">This is not to say that you cannot shape <para><emphasis role="bold">This is not to say that you cannot shape
downloads, regardless of which Shorewall release you are download traffic, regardless of which Shorewall release you are
running</emphasis>.</para> running</emphasis>.</para>
<blockquote> <blockquote>
<para>If you wish to shape downloads, you can always configure traffic <para>If you wish to shape downloads, you can always configure traffic
shaping on your firewall's local interface. An example appears <link shaping on your firewall's local interface. An example appears <link
linkend="Downloads">below</link>.</para> linkend="Downloads">below</link>.</para>
<para>Again, however, <emphasis role="bold">this can result in queues
building up both at your ISPs router and at your own</emphasis>.</para>
</blockquote> </blockquote>
<para>You shape and control outgoing traffic by assigning the traffic to <para>You shape and control outgoing traffic by assigning the traffic to
@ -234,7 +237,9 @@
assign connection mark values in assign connection mark values in
<filename>/etc/shorewall/tcrules</filename>, you can copy the current <filename>/etc/shorewall/tcrules</filename>, you can copy the current
packet's mark to the connection mark (SAVE), or you can copy the packet's mark to the connection mark (SAVE), or you can copy the
connection mark value to the current packet's mark (RESTORE).</para> connection mark value to the current packet's mark (RESTORE). For more
information, see<ulink url="PacketMarking.html"> this
article</ulink>.</para>
</section> </section>
<section id="Kernel"> <section id="Kernel">
@ -266,18 +271,20 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>Set <emphasis role="bold">TC_ENABLED</emphasis> to "Internal" in <para>Set <emphasis role="bold">TC_ENABLED</emphasis> to "<emphasis
/etc/shorewall/shorewall.conf. Setting TC_ENABLED=Yes causes Shorewall role="bold">Internal</emphasis>" in /etc/shorewall/shorewall.conf.
to look for an external tcstart file (See <link linkend="tcstart">a Setting <emphasis role="bold">TC_ENABLED=Yes</emphasis> causes
later section</link> for details).</para> Shorewall to look for an external tcstart file (See <link
linkend="tcstart">a later section</link> for details).</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Setting <emphasis role="bold">CLEAR_TC</emphasis> parameter in <para>Setting <emphasis role="bold">CLEAR_TC</emphasis> parameter in
/etc/shorewall/shorewall.conf to Yes will clear the traffic shaping /etc/shorewall/shorewall.conf to <emphasis role="bold">Yes</emphasis>
configuration during Shorewall [re]start and Shorewall stop. This is will clear the traffic shaping configuration during Shorewall
normally what you want when using the builtin support (and also if you [re]start and Shorewall stop. This is normally what you want when
use your own tcstart script)</para> using the builtin support (and also if you use your own tcstart
script)</para>
</listitem> </listitem>
<listitem> <listitem>
@ -338,13 +345,14 @@
integer numbers are supported (0.5 is <emphasis role="bold">not integer numbers are supported (0.5 is <emphasis role="bold">not
valid</emphasis>).</para> valid</emphasis>).</para>
<para>To properly configure the settings for your devices you might need <para><emphasis role="bold">To properly configure the settings for your
to find out the real up- and downstream rates you have. This is especially devices you need to find out the real up- and downstream rates you
the case, if you are using a DSL connection or one of another type that do have</emphasis>. This is especially the case, if you are using a DSL
not have a guaranteed bandwidth. Don't trust the values your provider connection or one of another type that do not have a guaranteed bandwidth.
tells you for this; especially measuring the real download speed is Don't trust the values your provider tells you for this; especially
important! There are several online tools that help you find out; search measuring the real download speed is important! There are several online
for "dsl speed test" on google (For Germany you can use <ulink tools that help you find out; search for "dsl speed test" on google (For
Germany you can use <ulink
url="http://www.speedcheck.arcor.de/cgi-bin/speedcheck.cgi">arcor speed url="http://www.speedcheck.arcor.de/cgi-bin/speedcheck.cgi">arcor speed
check</ulink>). Be sure to choose a test located near you.</para> check</ulink>). Be sure to choose a test located near you.</para>
@ -390,11 +398,11 @@
shaping incoming traffic, as the traffic is already received before shaping incoming traffic, as the traffic is already received before
you could do so. This Column allows you to define the maximum you could do so. This Column allows you to define the maximum
traffic allowed for this interface in total, if the rate is traffic allowed for this interface in total, if the rate is
exceeded, the packets are dropped. You want this mainly if you have exceeded, the excess packets are dropped. You want this mainly if
a DSL or Cable Connection to avoid queuing at your providers side. you have a DSL or Cable Connection to avoid queuing at your
If you don't want any traffic to be dropped set this to a value providers side. If you don't want any traffic to be dropped set this
faster than your interface maximum rate (or to 0 (zero), if you are to a value faster than your interface maximum rate (or to 0 (zero),
running Shorewall 3.2.6 or later).</para> if you are running Shorewall 3.2.6 or later).</para>
<para>To determine the optimum value for this setting, we recommend <para>To determine the optimum value for this setting, we recommend
that you start by setting it significantly below your measured that you start by setting it significantly below your measured