Dear Mr Biazus: i tested Tproxy patch under linux (2.6.31.6-166) up to 180Mbps. pay attention on the amount of sockets permitted by your tcp config. in linux are under the sysctl.conf , to reach a reasonable bandwith , i have these settings: net.ipv4.netfilter.nf_conntrack_max = 131070 net.ipv4.netfilter.nf_conntrack_expect_max = 131070 net.ipv4.netfilter.ip_conntrack_tcp_timeout_estabilished=600 net.ipv4.netfilter.ip_conntrack_udp_timeout=60 net.ipv4.netfilter.ip_conntrack_udp_timeout_stream=180 net.netfilter.nf_conntrack_max = 131070 net.netfilter.nf_conntrack_expect_max = 131070 net.netfilter.ip_conntrack_tcp_timeout_estabilished=600 net.netfilter.ip_conntrack_udp_timeout=60 net.netfilter.ip_conntrack_udp_timeout_stream=180
From whoses that dont know or dont like to recompile the kernel , i have it compiled in a rpm for Fedora 12, and the versions 3.1.0.14/3.1.8/3.1.9 of squid patched in rpm format too. i dont post the link to download due my personal server bandwith limitations but from who needs i have those files as the instructions for installing to
Regards, Hugo Petrucci Mensaje citado por tproxy-request@lists.balabit.hu:
Send tproxy mailing list submissions to tproxy@lists.balabit.hu
To subscribe or unsubscribe via the World Wide Web, visit https://lists.balabit.hu/mailman/listinfo/tproxy or, via email, send a message with subject or body 'help' to tproxy-request@lists.balabit.hu
You can reach the person managing the list at tproxy-owner@lists.balabit.hu
When replying, please edit your Subject line so it is more specific than "Re: Contents of tproxy digest..."
Today's Topics:
1. Tproxy Bandwidth limit (Luiz Biazus) 2. Re: Kernel Panic/System Hang when using TPROXY with 2.6.27 or later (KOVACS Krisztian) 3. Re: Tproxy Bandwidth limit (KOVACS Krisztian)
----------------------------------------------------------------------
Message: 1 Date: Mon, 8 Nov 2010 20:53:15 -0200 From: Luiz Biazus <luiz@biazus.com> Subject: [tproxy] Tproxy Bandwidth limit To: tproxy@lists.balabit.hu Message-ID: <AANLkTimBWR0tDWca00KWABczF0QOrXfrrGyO2SOwQy+v@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1
hello guys,
Is it true that tproxy has a bandwidth limit of 80mb/s on linux?
bst rgds
Luiz
------------------------------
Message: 2 Date: Tue, 09 Nov 2010 07:47:10 +0100 From: KOVACS Krisztian <hidden@balabit.hu> Subject: Re: [tproxy] Kernel Panic/System Hang when using TPROXY with 2.6.27 or later To: FREY Oliver <FREY.O@ikarus.at> Cc: tproxy@lists.balabit.hu Message-ID: <1289285230.4570.6.camel@nienna.balabit> Content-Type: text/plain; charset="UTF-8"
Hey Oliver,
On Thu, 2010-10-28 at 10:26 +0200, FREY Oliver wrote:
sorry for my late reply, we had some delays in compiling and deploying the kernel. I took the diffs from the Website and created a .patch-File which then could be applied to to the vanilla 2.6.35.7-Kernel-Source without issues - is there a more efficient way to retrieve all the diffs for a commit in one file?
Sure, you can get the whole patch as-is via the web interface.
This is the patch you want:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=...
You can get a .patch file containing all the fixes related to these files by clicking on the 'patch' link at the top of the page:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=patch;h=0...
Are there any CONFIG_DEBUG-options you can recommend to be set just in case we run into issues again, or to see if there are any issues left?
Well, apart from enabling linked list debugging and SLUB debugging I don't think any of those would be of much use.
As the machines previously never survived more than 72 hours without crashing, by next week I will definitely know if the issue is fixed, and I'll report back then. For now, thanks for your great and very quick support!
Do you have any update on this? How did your testing go?
Cheers, Krisztian
------------------------------
Message: 3 Date: Tue, 09 Nov 2010 07:49:03 +0100 From: KOVACS Krisztian <hidden@balabit.hu> Subject: Re: [tproxy] Tproxy Bandwidth limit To: Luiz Biazus <luiz@biazus.com> Cc: tproxy@lists.balabit.hu Message-ID: <1289285343.4570.8.camel@nienna.balabit> Content-Type: text/plain; charset="UTF-8"
Hi,
On Mon, 2010-11-08 at 20:53 -0200, Luiz Biazus wrote:
Is it true that tproxy has a bandwidth limit of 80mb/s on linux?
I don't think that's true -- I'd definitely consider that to be a problem that should be fixed as soon as possible.
Cheers, Krisztian
------------------------------
_______________________________________________ tproxy mailing list tproxy@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/tproxy
End of tproxy Digest, Vol 64, Issue 1 *************************************
------------------------- www.gigared.com