netdev - HTB behaviour renders cburst feature useless

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20071226051902.M97942@visp.net.lb>
Date:	Wed, 26 Dec 2007 07:33:09 +0200
From:	"Denys Fedoryshchenko" <denys@...p.net.lb>
To:	netdev@...r.kernel.org
Subject: HTB behaviour renders cburst feature useless

Hi again

I am trying to use HTB for providing "double" speed shaper. It will looks 
like (graph):

XXXX
XXXX
XXXXYYYY
XXXXYYYY

Explanation:
For example user have bursty rate 1Mbit/s with "bucket"(derived from squid) 
size 10Mbyte, and then he will have 500Kbit/s if bucket is empty. Bucket 
refilled with speed 500Kbit/s. So if user downloading file with size 20Mbyte, 
he will get first 10Mbyte on speed 1Mbit/s, and second part with speed 
500Kbit/s. On TBF i can do this easily, but on HTB it is not trivial, and not 
working as it expected to work.

On HTB i set

#!/bin/sh
tc qdisc        del dev eth0 root
tc qdisc        add dev eth0 handle 1: root htb

#ROOT class is zero, just i am expecting when cburst finished, ceil will not 
be provided.

tc class        add dev eth0 parent 1:0 classid 1:1 htb rate 8bit ceil 8bit 
quantum 1514

#This is values as explained. 
tc class        add dev eth0 parent 1:1 classid 1:3 htb rate 500Kbit ceil 
1Mbit quantum 1514 cburst 10240kb
tc qdisc        add dev eth0 parent 1:3 handle 30 pfifo limit 1

tc filter       add dev eth0 parent 1:0 protocol ip prio 5 u32 match ip src 
192.168.1.1/32 flowid 1:3

But it works not as i am expecting.
1)I can send this 10Mbyte with any speed. It seems will not be limited at 
1Mbit/s.
2)After i reach 10Mbyte traffic will be blocked completely for some time! 
Even queue set as pfifo with 1 packet. It has to be sent with speed 500Kbit 
and all exceeding this value packets has to be dropped. But it is stopping 
whole class traffic completely.

--
Denys Fedoryshchenko
Technical Manager
Virtual ISP S.A.L.

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html