From SieveFirewall

ukulele movie staying alive torn rib cartilage treatment portugal river mouth amp animal career environment services whittier shipping international traveling nurse live weather red heaven band lois lane stripper sitemap commodity future option broker easy movie rider acrobatic video mini moto videos free phone ringtone sanyo lucas realty group ida drug stores www sydney pollack movies tight tops shambhala penis stimulate video drug list funny parodies activebar crack ifakara centre free polyphonic ringtones nokia 3200 free masterbating women golf discount card free gay latino movie clips mable movie sleep star namenda nintendo piano video url skimpy underwear jacquettes fastcars tgv xxx free galleries alternative thyroid cancer treatment movie point stevens theater ambien problem inspirational short story thanksgiving statistics on prozac consumption in the us tickling children russian models sitemap residential real estate arizona atofina cellular lg ringtone us winscp.exe download noise ninja plugin serialz pipe markers preteen real sex it rubs the lotion on its skin video www.babes.net kaioushin personal submarine bills khakis lucas arts mercenaries reviews saint francis movie grade book software ass in jeans aim profile images free big titty thumbs website postpartum anxiety disorder howard huges women masturbating sounds imovie for mac os 9 life insurance license training equipment rental toronto video free gothic babes llc corporation we must be in love convert mp3 ringtone free hot blonde porn business service all sound recorder xp crack particle illusions 3 crack sarah michelle gellar movie john stewart cnn video list of musicals by andrew lloyd webber free ringtones for lg verizon wireless users presidents day activities kids career choices r budd dwyer suicide video inuyasha the movie 2 review rent a car unlimited miles pcmightymax cracks posting video on a site nextel ringtones pablo dagnino event horizon movie script sitemap annie chewing gum music video chicago nympho real estate in sealy texas east cobb real estate rich content local government erica eleniak business solutions fun sites mature tales used nissan engine trolls concert flashing eye diseases service management software virtual florist cat breeds carpets marcy playground corporate gifts heshe ciara lyrics ncaa merchandise shag janet gunn sarcoma digital camera technology body hair removal outboard motors southern california mls iceland ramstein bridal wear cleaning tips cocolo cell phone comparison stationary supplies world atlas basketball jerseys tina hobley freecreditreport.com bed bug seattle real estate mimi rogers ballkicking hear wainscoting warning blo liebert schoolhouse rock ingrid cape hatteras first alert stall mats naot shoes invention spreadsheet memphis realtors advertisement bow wow let me hold you camcorder batteries freelancer brooke burke womens feet las vegas resale homes juicy lips work at home moms mate1 handmade pottery wpw rustoleum zeromancer herpies iflyswa the gunge club orlando brown discount atv parts serious cat urine discount car rentals blockbusters rent an rv platinum wedding rings cheer leader compaq presario eve laurence eva longoria diaz bad boys building envelope jennifer lopez hold you down light sport aircraft taboo amerigo vespucci mule deer mohegan sun sindee coxx tribal symbols gas range statues loli gift basket supplies custom rifle firewall stock broker training thomas the tank engine chanel handbags orbitz novolog contemporary bedroom furniture gottex swimwear female masterbation young gay monster truch gas prices all poster free porn amature canon camera tips on house cleaning asian dating sage robbins colored diamonds for sale lexington steele sexology pain med cheap air tickets pill identification companies house raunchy granny old sex california realestate sauder computer desk with hutch victoria secrets butterfly tattoos pilot online free ring tones razor phone mortgage ammortization tables paris hilton sexvideo psp porn swinger hanging cosmetic bag addaware drape ketamine cyprus properties live sex cams replica anal stretching epic treadmills classic car insurance staple xxx sex xxx wedding band adelphia cable skimpy bikini weddings performance evaluation metal bar stool viagra motorhome blow job cum ivy tech state college bad credit credit cards nextel phone best time to buy a new car free beast sex movies ohio festivals uk chatroom bondage shops deodorant diet pills phentermine truck part free download game lion king celebs movies dupont real touch elite laminate flooring adobe illustrator cs2 indian cinema ryobi part lawyers singapore computer buy dvd decoder gothic halloween costume bmw wallpaper bank one international trucks military schools rent porn movie cheap baby shower invitations celcom caller ringtone live psychic daily free horoscope ovral princess cruise line aldara unsecured personal loans with bad credit czech glass pearls tmobile ringtones free powerpoint safety presentations keyless lock babes recumbent exercise bike trailer electrical plugs stacker 3 shelby mustang gt 500 pornstars ring tones proactiv wife naked gay porn star free young pussy plus size wedding dress rita faltoyano print greeting card concubine weapon download free motorola ringtones sigma lenses short stories free antispyware real child porn pennis enlarger outdoor furniture free corel draw paris hilton sex tape traffic lights designer imitation handbag internet betting nikki nova keygen bejeweled 2 honda crv 2007 laughlin nevada house paint mypay dfas mil ecommerce web site j k rowling wellbutrin withdrawal extacy red alert download revia depression pictures mimi macpherson inversion table haldol cadillac cts wholesale eyeglass case spread pussies jessica simpson nude caravan insurance citalopram charlie chaplin fuck me currency conversions well fargo jobs suzuki boulevard florida state hypnotized teen diesel shoes brooke annaversary lovastatin softice download tyra banks wifesharing manga girls cambridge soundworks sister nude armani perfume bike carrier texas holdem poker hairy pussy sex amateurstraightguys single dating free i730 nextel ringtone wallpaper esthetician equipment lesbian boobs olsen twins naked school gerls calpers black lesbians united airlines itunes bupropion effects of divorce on children work from home business jd edwards mature bitches discount wedding invitation foo fighters the best hawaiian airline norton anti virus food gift baskets mosquito ring tone alaska airline flight information raise your voice play station 2 grasshopper information on acyclovir paintless dent repair queens wet hot sex registered dietician schools yamaha portable generator rifle stocks meta search engine query pattern verizon wireless software download local economic development projects tech report 1999 99 business week malo muy investor market 40 kit p plane radon gas areas power driver failure long beach organics stock controller jobs us cellular coverage map supply tow truck nursing home in washington dc image in a plane mirror national labour market statistics wood workshop ideas industries in andhrapradesh university of iowa job net advertisement car old i inside movie saint edith stein k nuisance monster truck crash picture regisrty mechanic key used guitar case eagle transportation corp tank girl pictures tip design suck him dry large format camera kit medical board examination 1800s american history advertising television and radio production asf video in html outcome evaluation women defeating men eagle tee shirts oil and gas consultants rock star fashion mammoth mountain resort annuity florida private trust local katrina relief efforts power plant professional sky city cinema scientific balance webcam motion detection modern round rugs white chili recipes 5 percent club negotiate a loan autograph collectibles temporary recruitment agency service data objects northeast realty group ready this youll music for the moment synchronizing act schroders london auto sales dallas texas keystone golf network tv computer usa companies registry mercedes benz replacement part the calls restaurant leeds teenage girl bathing suits send free uk text messages pc skin jesus name above all names allowable settlement ati bios flashing packer rumor adult height weight average new jersey ethanol west point virginia public schools trendy clothes stores night and the city deniro jobs in lancaster county pa. longs plumbing edging machine metal sheet ip protection world of warcraft priest print yourself wedding invitation portable tv dvd cd jim williams guitar maker medicine career information americas freedom center article article internet submit telephony veterinarian requirement subways of the world average law school gpa saint paul mortgage network printing linux whos on my page my space tracker adult movie rated xxx austin real world lord of the rings sound files university of phoenix in dallas porsche 911 turbo walker smith way new jersey registry of motor vehicles peanut factory picos school 2 kenyas population 2004 online brain puzzles little boy angels nodal artery manifacture homes sales manual pdf software shopping basket stage backdrop design ipod video battery kansas city ks attraction stars in circles advertising job search sites aroma therapy essential oil ip address location software 19 flat inch lcd monitor panel printer refill ink politics issues aukcje on line walking exercise dvd organization theory syllabus signal processing distance learning oil sending unit tea house plan english shillings software shopping basket simple greek myth vitiman c lyrics japanese manufactories steel alexander the great empire map rental cars cheapest neck cramps toronto college and university ip address location software implicit memory task south sea import fabrics port of hope idaho explanation of the rock cycle emergent reality navigational hazard audience mary ann fisher and ray charles american river junior college love your enemies jesus mr and mrs smith movie pic nerd egg i can see your nj financial planner 1903 ford model smith county kansas the aftermath of natural disaster engine google india optimization search unsolved deaths miami dade housing on line college courses las vegas downtown casinos pam lee brett univ of florida gainesville sir charles court young leaders program kathryn wise tack boxes javascript file uploading radon gas areas mail order brides mexican seaside highschool service shrink wrap two opposing information technology and central government picking services stock wood workshop ideas ashland specialty suntrust bank arbetsmarknad mark martin car pics ironman movies south dakota travel information gay photos of gisele bundchen who wrote the gospel of mark up do hairstyle photos auto patcher windows real estate investors clubs non pierced body jewellery ultimate fighter workouts kailua high research and development job installing insulation american car grand selling series sports ticket security update windows 98 address data entry standards unity marketing military manual online simon river mast cell tumors starting a driving range scaner izmir hotel nyc kitchen ww daf bookservice site maxtor 160gb 7200rpm krak fifa 2003 profumi schon cekaf forswear.info allarme a scotland yard www gloog www alfasport net kollector url Traci lords movie xxx barbye virtualdub griswold centar www alco com mp3pro plug in nero mv 1 www cartoonnetwork con qinghai hu ginger snaps Salma hayek fake cyber mouse cat6 draytek router adsl xd adapter asus mypal a620 acer 5130 pietre tampopo www fotohighway com she s like an angel isreal rainbow azur smile non te reggae piu acorn od 1 do 10 pavia webcam usb 2 0 svga world congress pain video the servent mieru lord jim kourou ep 8550 raison map prg 70 fostex fe home lacie 300728ek depsa esquirol tawhid wal jihad deny adobe photoshop 6 jacinthe.info videotelefono umts samsung emp twd1 epson www wdsu com athlon amd mae nam grinder charley ruby amanfu tanp episomes.info campground forswear.info filippine humax 5400 link re 100 kayo i like dat tv al plasma phocus lacie dvd lightscribe toast richard clayderman foto lexmark p4350 page wp cp2 nikon deck the halls cht 10 r velodyne pcsx mw 450 za za za grupo climax amd socket a Preteen bbs url amstrad 42 anunci lavoro offro bpi express online ruota in gomma ray ban 4034 al cineme acer gps navman sposa unrust.info cnazel

Contents 1 Introduction 2 Shorewall 3 Bandwidth control in Sieve 4 Bandwidth rules 5 Examples 5.1 Protection from backup processes 5.2 Administrative users

Introduction

Linux bandwidth control is an extremely complex subject. There are hundreds of parameters that each have many idiosyncrasies. This is not an attempt to document Linux bandwidth control. Good references exist which go into any amount of detail you would like, some of which are listed at the end of this document.

What this document does attempt to do is explain how Sieve tackles the bandwidth control problem. It starts with a brief introduction to bandwidth control in Linux, and then how Sieve allows you to configure it.

Shorewall

At its most basic, the Sieve GUI is a configuration tool for Shorewall that will be running inside the VM. Shorewall uses the HTB (Hierarchical Token Bucket) filter classes to control traffic, and SFQ within these classes to ensure all data flows within a class are treated equally. A Pipe in Sieve will create a class in Shorewall's tcclasses file, which will create a HTB class with tc.

Bandwidth control in Sieve

Sieve uses “pipes” to manage bandwidth. Think of a pipe just as you would a water pipe or garden hose. A 3” diameter PVC pipe can flow more water than a 1/2” garden hose. Your gigabit network card is a 10” PVC pipe, which we want to divide up to several houses, or zones. Sieve lets you split that 10” PVC pipe into several smaller pipes.

A pipe is defined through several parameters and in each direction. The minimum bandwidth specifies the amount of bandwidth this pipe should get if at all possible. The maximum bandwidth specifies the upper limit, traffic will not be allowed to go above this amount. Priority lets you define which pipe will get available bandwidth first when it gets in short supply.

Bandwidth rules

1. The amount of service provided to each pipe is at least the amount it requests below the minimum value
2. When a pipe requests less than its minimum, the excess is distributed to other pipes
3. A pipe will be throttled at its maximum
4. Pipes with higher (lower numerically) priorities are offered excess bandwidth first

These four basic rules summarize how HTB, Shorewall, and Sieve work. Sieve tries to accommodate all of the minimum requirements first. It then starts allocating leftover bandwidth to requests between a pipe's minimum and maximum, based on priorities. Given these rules, here are some general rules on configuring your system.

1. Set the maximum throughput on the system tab to what your server can handle. This is not what the networking system can push, but what the attached application can push. This parameter is there to protect the server in general.
2. After establishing how you will divide your clients into zones, determine what minimum bandwidth you want them to have when the system is loaded. This will define their worst case level of service.
3. After defining the minimums, decide if there are any zones which should be limited below the maximum for the system. For example, backup server traffic may need to be limited to protect the general level of service for other users.
4. If the total of all the minimum bandwidth allocations for all of the pipes exceeds the total defined on the system tab, the total on the system tab will throttle traffic, preventing the minimums from being satisfied.
5. Priorities only come into account when allocating bandwidth above the minimum to pipes.

Examples

Protection from backup processes

Most systems are backed up overnight when user requirements are low. While the backup is running client response times can still be impacted. By using Sieve, you can reduce or eliminate this response time issue.

Zone	Down Min	Down Max	Up Min	Up Max	Priority
	10 mbit		10 mbit
Backup	0 kbit	100 kbit	0 kbit	100 kbit	5
Default	500 kbit	10 mbit	500 kbit	10 mbit	0

In this example the backup server will be throttled at 100kbit, and all other clients will get at least 500kbit. With no minimum on the backup server, clients will be able to get 100% of available bandwidth if desired.

Administrative users

Administrative users, sytems operators and such, normally would not want any of their work to impact clients. A similar setup to the above could be used to help ensure this doesn't happen.

Zone	Down Min	Down Max	Up Min	Up Max	Priority
		10 mbit		10 mbit
Admin	100 kbit	500 kbit	100 kbit	500 kbit	1
Default	500 kbit	10 mbit	500 kbit	10 mbit	0