Zum Inhalt springen.
Sympa Menü

it-securitynotifies - Re: [IT-SecNots] Traffic shaping on debian

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

Re: [IT-SecNots] Traffic shaping on debian


Chronologisch Thread 
  • From: Martin Kraus <lists_mk AT wujiman.net>
  • To: Aleksey <unite AT openmailbox.org>
  • Cc: Dmitry Sinina <dmitry.sinina AT onat.edu.ua>, debian-isp AT lists.debian.org
  • Subject: Re: [IT-SecNots] Traffic shaping on debian
  • Date: Mon, 30 May 2016 17:34:19 +0200
  • List-archive: <https://service.piratenpartei.de/pipermail/it-securitynotifies>
  • List-id: Sicherheitsankündigungen <it-securitynotifies.lists.piratenpartei.de>
  • List-url: <https://lists.debian.org/debian-isp/>
  • Old-return-path: <lists_mk AT wujiman.net>
  • Resent-date: Mon, 30 May 2016 15:34:35 +0000 (UTC)
  • Resent-from: debian-isp AT lists.debian.org
  • Resent-message-id: <-V30_-2VWEL.A.l9H.L2FTXB@bendel>
  • Resent-sender: debian-isp-request AT lists.debian.org

On Mon, May 30, 2016 at 01:55:51PM +0300, Aleksey wrote:
> I have also noticed that all the load is on one CPU core it is not
> distributed to all available cores. And how can this be avoided?

There is a qdisc called mq which creates a class for each hardware queue on
the attached ethernet card. You can bind other qdiscs (such as htb) to each
of
these classes but this will not allow you to shape traffic for a single
type going out over all the hardware queues.

It might be possible to have multiple htb qdiscs and use filters to send
each type of traffic to a selected hardware queue. This has other adverse
effects (such as not being able to borrow unused bandwidth among the hw
queues) and there still might be lock contention among the cores for each
such
queue so it might not even work better.

If you are at 1 Gbit speed the cpu can probably handle it so there is no need
to do any of this. If you have a 10Gbit+ connection then this probably isn't
the correct place to do shaping anyway and should be done closer to the
source.

It depends on what you're trying to accomplish.

regards
Martin





Archiv bereitgestellt durch MHonArc 2.6.19.

Seitenanfang