[bwm-tools-tech] Configuration
Brought to you by:
nkukard
From: Ravi P. <ra...@sw...> - 2006-07-24 09:31:54
|
Hello All, I have managed to successfully test bwm_tools in a test environment. TO move to the next steps I have configured the following xml file: <firewall> # Global configuration and access classes <global> <modules> <load name="ip_queue"/> </modules> <class name="out_trexnet1"> <address name="out_trexnet1_tcp" src-iface="eth0" proto="tcp" src="61.59.42.5/32" dst="! 61.59.42.5/32" /> <address name="out_trexnet1_udp" src-iface="eth0" proto="udp" src="61.59.42.5/32" dst="! 61.59.42.5/32" /> </class> <class name="out_trexnet2"> <address name="out_trexnet2_tcp" src-iface="eth0" proto="tcp" src="61.59.42.16/29" dst="! 61.59.42.16/29" /> <address name="out_trexnet2_udp" src-iface="eth0" proto="udp" src="61.59.42.16/29" dst="! 61.59.42.16/29" /> </class> <class name="out_trexnet3"> <address name="out_trexnet3_tcp" src-iface="eth0" proto="tcp" src="61.59.42.24/29" dst="! 61.59.42.24/29" /> <address name="out_trexnet3_udp" src-iface="eth0" proto="udp" src="61.59.42.24/29" dst="! 61.59.42.24/29" /> </class> <class name="out_trexnet4"> <address name="out_trexnet4_tcp" src-iface="eth0" proto="tcp" src="61.59.42.32/27" dst="! 61.59.42.32/27" /> <address name="out_trexnet4_udp" src-iface="eth0" proto="udp" src="61.59.42.32/27" dst="! 61.59.42.32/27" /> </class> <class name="out_trexnet5"> <address name="out_trexnet5_tcp" src-iface="eth0" proto="tcp" src="61.59.42.64/26" dst="! 61.59.42.64/26" /> <address name="out_trexnet5_udp" src-iface="eth0" proto="udp" src="61.59.42.64/26" dst="! 61.59.42.64/26" /> </class> <class name="out_trexnet6"> <address name="out_trexnet6_tcp" src-iface="eth0" proto="tcp" src="61.59.42.192/29" dst="! 61.59.42.192/29" /> <address name="out_trexnet6_udp" src-iface="eth0" proto="udp" src="61.59.42.192/29" dst="! 61.59.42.192/29" /> </class> <class name="out_trexnet7"> <address name="out_trexnet7_tcp" src-iface="eth0" proto="tcp" src="61.59.42.208/29" dst="! 61.59.42.208/29" /> <address name="out_trexnet7_udp" src-iface="eth0" proto="udp" src="61.59.42.208/29" dst="! 61.59.42.208/29" /> </class> <class name="out_trexnet8"> <address name="out_trexnet8_tcp" src-iface="eth0" proto="tcp" src="61.59.42.224/28" dst="! 61.59.42.224/28" /> <address name="out_trexnet8_udp" src-iface="eth0" proto="udp" src="61.59.42.224/28" dst="! 61.59.42.224/28" /> </class> <class name="out_trexnet9"> <address name="out_trexnet9_tcp" src-iface="eth0" proto="tcp" src="61.59.42.240/29" dst="! 61.59.42.240/29" /> <address name="out_trexnet9_udp" src-iface="eth0" proto="udp" src="61.59.42.240/29" dst="! 61.59.42.240/29" /> </class> <class name="in_trexnet1"> <address name="in_trexnet1_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.5/32" src="! 61.59.42.5/32" /> <address name="in_trexnet1_udp" dst-iface="eth0" proto="udp" dst="61.59.42.5/32" src="! 61.59.42.5/32" /> </class> <class name="in_trexnet2"> <address name="in_trexnet2_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.16/29" src="! 61.59.42.16/29" /> <address name="in_trexnet2_udp" dst-iface="eth0" proto="udp" dst="61.59.42.16/29" src="! 61.59.42.16/29" /> </class> <class name="in_trexnet3"> <address name="in_trexnet3_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.24/29" src="! 61.59.42.24/29" /> <address name="in_trexnet3_udp" dst-iface="eth0" proto="udp" dst="61.59.42.24/29" src="! 61.59.42.24/29" /> </class> <class name="in_trexnet4"> <address name="in_trexnet4_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.32/27" src="! 61.59.42.32/27" /> <address name="in_trexnet4_udp" dst-iface="eth0" proto="udp" dst="61.59.42.32/27" src="! 61.59.42.32/27" /> </class> <class name="in_trexnet5"> <address name="in_trexnet5_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.64/26" src="! 61.59.42.64/26" /> <address name="in_trexnet5_udp" dst-iface="eth0" proto="udp" dst="61.59.42.64/26" src="! 61.59.42.64/26" /> </class> <class name="in_trexnet6"> <address name="in_trexnet6_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.192/29" src="! 61.59.42.192/29" /> <address name="in_trexnet6_udp" dst-iface="eth0" proto="udp" dst="61.59.42.192/29" src="! 61.59.42.192/29" /> </class> <class name="in_trexnet7"> <address name="in_trexnet7_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.208/29" src="! 61.59.42.208/29" /> <address name="in_trexnet7_udp" dst-iface="eth0" proto="udp" dst="61.59.42.208/29" src="! 61.59.42.208/29" /> </class> <class name="in_trexnet8"> <address name="in_trexnet8_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.224/28" src="! 61.59.42.224/28" /> <address name="in_trexnet8_udp" dst-iface="eth0" proto="udp" dst="61.59.42.224/28" src="! 61.59.42.224/28" /> </class> <class name="in_trexnet9"> <address name="in_trexnet9_tcp" dst-iface="eth0" proto="tcp" dst="61.59.42.240/29" src="! 61.59.42.240/29" /> <address name="in_trexnet9_udp" dst-iface="eth0" proto="udp" dst="61.59.42.240/29" src="! 61.59.42.240/29" /> </class> </global> # Access control lists # Network address translation # Traffic flows <traffic> # Rate can be specified in either IN, OUT or TOTAL (ratetotal) # If ratetotal == 0, no rate limits <flow name="out_trexnet" stats-len="5" queue-size="262144" queue-len="4000" max-rate="576000" report-timeout="60"> <flow name="out_trexnet1" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1001">out_trexnet1;</queue> </flow> <flow name="out_trexnet2" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1002">out_trexnet2;</queue> </flow> <flow name="out_trexnet3" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1003">out_trexnet3;</queue> </flow> <flow name="out_trexnet4" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1004">out_trexnet4;</queue> </flow> <flow name="out_trexnet5" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1005">out_trexnet5;</queue> </flow> <flow name="out_trexnet6" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1006">out_trexnet6;</queue> </flow> <flow name="out_trexnet7" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1007">out_trexnet7;</queue> </flow> <flow name="out_trexnet8" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1008">out_trexnet8;</queue> </flow> <flow name="out_trexnet9" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1009">out_trexnet9;</queue> </flow> </flow> <flow name="in_trexnet" stats-len="5" queue-size="262144" queue-len="4000" max-rate="576000" report-timeout="60"> <flow name="in_trexnet1" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1011">in_trexnet1;</queue> </flow> <flow name="in_trexnet2" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1012">in_trexnet2;</queue> </flow> <flow name="in_trexnet3" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1013">in_trexnet3;</queue> </flow> <flow name="in_trexnet4" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1014">in_trexnet4;</queue> </flow> <flow name="in_trexnet5" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1015">in_trexnet5;</queue> </flow> <flow name="in_trexnet6" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1016">in_trexnet6;</queue> </flow> <flow name="in_trexnet7" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1017">in_trexnet7;</queue> </flow> <flow name="in_trexnet8" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1018">in_trexnet8;</queue> </flow> <flow name="in_trexnet9" max-rate="256000" burst-rate="576000" queue-size="16384" stats-len="5" report-timeout="60"> <queue prio="40" nfmark="1019">in_trexnet9;</queue> </flow> </flow> </traffic> </firewall> ===================== The above limits the whole input and output to 4.5MBPS approx. On running bwmd, I immediately get the following: ================================= BWM Daemon v0.2.3 - Copyright (c) 2003-2006 Linux Based Systems Design BWMD: Loaded 20 flows and 18 queues BWMD: Found 1 modules to load Loading ip_queue...done IPQ runner started... Flow runner started... Stat thread started... Report runner started... Failed to get packet from IPQ: Received message truncated passer: Received message truncated ========================= What could be the problem? Please advise if possible. Regards Ravi |