341 reputation
19
bio website e-x-a.org
location
age
visits member for 3 years, 5 months
seen Mar 23 at 11:37

Jul
20
comment One To One NAT, only works on WAN?
okay, answering with possible solution.
Jul
19
comment One To One NAT, only works on WAN?
If I get it coorectly: you make 1:1 NAT of IP 192.168.1.X to IP 192.168.2.Y on the bottom NAT router, but computers from 192.168.1.0/24 network complain that "destination host is unreachable"? (If this is correct, solution is pretty simple -- add the 192.168.1.X address to WAN interface of the NATting router, which should create ARP entries correctly.)
Jul
14
comment TC hashing filters - single rule deletion
Works! thanks very much. I had some mess in actual prio's and other stuff, this clarified all of that.
May
22
comment Does the load balancer return the response to the client, or does the worker?
edited to the answer :]
Dec
31
comment Linux TC class/filter numbering
@Pabluez Thanks very much, I will try to get the best out of it.
Dec
31
comment Linux TC class/filter numbering
For original question, I was more interested in stuff like adding 5 different classes for each user, which would allow me to do a really good QOS job (like handling streams and realtime traffic separately), but is mostly unthinkable in current conditions (with my current use case of ~20k endpoints i'd be already behind the limit).
Dec
31
comment Linux TC class/filter numbering
I'm ensuring service availability on some other level, but thanks for concern. Actually, with good NIC's, it isn't that hard to have a linux router that can forward 10Gbits.
Nov
16
comment TC hashing filters - single rule deletion
Strange, I got the same kernel. Could you provide the whole code you used for doing the test? Maybe I'm creating the rules wrong way...
Nov
15
comment TC hashing filters - single rule deletion
Nope, this deletes all filters for me :( What is your kernel/iproute version combination? maybe it's some kind of bug after all...
Aug
25
comment Linux TC class/filter numbering
64bit kernel uses the same sizes. For example, the filter number is u32-integer that consists of upper (protocol) and lower part (prio) both obviously 16bit. Class IDs are hardcoded as u16. Probably gonna try asking someone on LKML.
Mar
24
comment Unix sort for partially ordered data sets
good idea :] I just need to split the file to lines, but this can be done using splt -l 100000. Thanks
Feb
20
comment IPTables Match for hashing IP addresses
robustnes nor security wouldn't do any problem, routers are mostly dedicated right. Performance kindof scares me, it should be able to match around 10k packets per second without being the topmost CPU user of the router. Good idea though, gonna read the docs.
Feb
20
comment IPTables Match for hashing IP addresses
Yeah it's close. Still I'd like some hash-supplied randomization for this. Probably gonna contact mikrotik and ask them to explain that, or code an u32 patch (which shouldn't be difficult at all)
Nov
16
comment Load average problem (mostly cosmetic)
Gonna check all of that once more, but I'm afraid it doesn't really solve the problem; I've already checked them all. Good tip on the filesystem thingy, and I realized that I have a rather old udev. Gonna try upgrading, will see after that.