nodeny+linux+shaper

[md5]

а как же сегментирование и агрегация каналов?

ноденай может легко с несколькими сателлитами работать

Дело не в сателлитах. А в количестве ppp интерфесов подключеных..

Вопрос по сути дела:

modprobe ipfw_mod
FATAL: Error inserting ipfw_mod (/lib/modules/2.6.33.3-lisc/kernel/net/netfilter/ipfw_mod.ko): Device or resource busy

lsmod
Module                  Size  Used by
ipt_MASQUERADE          1335  54
xt_statistic            1050  1
ts_kmp                  1479  1
xt_string               1034  1
xt_limit                1174  3
iptable_filter          1205  1
xt_tcpudp               1774  7
iptable_nat             3171  1
nf_nat                 12277  2 ipt_MASQUERADE,iptable_nat
nf_conntrack_ipv4       8583  3 iptable_nat,nf_nat
nf_conntrack           47381  4 ipt_MASQUERADE,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_defrag_ipv4           901  1 nf_conntrack_ipv4
ip_tables               8208  2 iptable_filter,iptable_nat
x_tables               10676  7 ipt_MASQUERADE,xt_statistic,xt_string,xt_limit,xt_tcpudp,iptable_nat,ip_tables
8139too                14425  0
mii                     3398  1 8139too


 modinfo ipfw_mod
filename:       /lib/modules/2.6.33.3-lisc/kernel/net/netfilter/ipfw_mod.ko
license:        Dual BSD/GPL
depends:
vermagic:       2.6.33.3-lisc SMP mod_unload PENTIUM4
parm:           hash_size:int
parm:           pipe_slot_limit:long
parm:           pipe_byte_limit:long
parm:           io_fast:int
parm:           debug:int
parm:           expire:int
parm:           expire_cycle:int
parm:           red_lookup_depth:int
parm:           red_avg_pkt_size:int
parm:           red_max_pkt_size:int
parm:           tick_delta:long
parm:           tick_delta_sum:long
parm:           tick_adjustment:long
parm:           tick_diff:long
parm:           tick_lost:long
parm:           schk_count:int
parm:           si_count:int
parm:           fsk_count:int
parm:           queue_count:int
parm:           io_pkt:ulong
parm:           io_pkt_fast:ulong
parm:           io_pkt_drop:ulong
parm:           dyn_buckets:int
parm:           curr_dyn_buckets:int
parm:           dyn_count:int
parm:           dyn_max:int
parm:           dyn_ack_lifetime:int
parm:           dyn_syn_lifetime:int
parm:           dyn_fin_lifetime:int
parm:           dyn_rst_lifetime:int
parm:           dyn_udp_lifetime:int
parm:           dyn_short_lifetime:int
parm:           dyn_keepalive:int
parm:           one_pass:int
parm:           autoinc_step:int
parm:           verbose:int
parm:           verbose_limit:int
parm:           default_rule:uint
parm:           tables_max:uint
parm:           default_to_accept:int
parm:           static_count:int

не могу понять чем же он занят ?

[kesha]

согласен с stimels
хотя я не заморачивался, т.к. клиентов мало.
А будут проблемы - поставил бы 2...N-ны сервер (как это делают люди), да и с настройкой ВПНа у "тупых" клиентов вопросы отпадают) - в итоге разгруженный саппорт

[kesha]

Дело не в сателлитах. А в количестве ppp интерфесов подключеных..

Вопрос по сути дела:

не могу понять чем же он занят ?

дык разнеси их по vpn-серверам...
dmesg, что говорит и что в логах? если ничего информативного - загрузи модуль с debug=1 и с verbose=1

[md5]

дык разнеси их по vpn-серверам...
dmesg, что говорит и что в логах? если ничего информативного - загрузи модуль с debug=1 и с verbose=1

[ 9544.123380] my_mod_register ipfw called
[ 9544.123397] my_mod_register sy_ipfw called
[ 9544.123408] my_mod_register sy_Vnet_ipfw called
[ 9544.123420] my_mod_register dummynet called
[ 9544.123431] my_mod_register dn_fifo called
[ 9544.123442] my_mod_register dn_wf2qp called
[ 9544.123454] my_mod_register dn_rr called
[ 9544.123465] my_mod_register dn_qfq called
[ 9544.123476] init_children mod_idx value 8
[ 9544.123493] +++ start module 0 ipfw ipfw at fe98c980 order 0x1
[ 9544.123510] +++ start module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9544.123523] ipfw2 initialized, divert loadable, nat loadable, rule-based forwarding disabled, default to accept, logging
[ 9544.123539] unlimited
[ 9544.123551] +++ start module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9544.123702] +++ start module 3 dummynet dummynet at fe98c99c order 0x4
[ 9544.123729] +++ start module 4 dn_fifo dn_fifo at fe98c9c4 order 0x5
[ 9544.123742] load_dn_sched dn_sched FIFO loaded
[ 9544.123759] +++ start module 5 dn_wf2qp dn_wf2qp at fe98ca44 order 0x6
[ 9544.123775] load_dn_sched dn_sched WF2Q+ loaded
[ 9544.123793] +++ start module 6 dn_rr dn_rr at fe98cac4 order 0x7
[ 9544.123805] load_dn_sched dn_sched RR loaded
[ 9544.123811] +++ start module 7 dn_qfq dn_qfq at fe98cb44 order 0x8
[ 9544.123816] load_dn_sched dn_sched QFQ loaded
[ 9544.123823] +++ end module 7 dn_qfq dn_qfq at fe98cb44 order 0x8
[ 9544.123828] unload_dn_sched called for QFQ
[ 9544.123833] unload_dn_sched ref_count = 0
[ 9544.123838] unload_dn_sched dn_sched QFQ unloaded
[ 9544.123843] +++ end module 6 dn_rr dn_rr at fe98cac4 order 0x7
[ 9544.123848] unload_dn_sched called for RR
[ 9544.123852] unload_dn_sched ref_count = 0
[ 9544.123856] unload_dn_sched dn_sched RR unloaded
[ 9544.123863] +++ end module 5 dn_wf2qp dn_wf2qp at fe98ca44 order 0x6
[ 9544.123868] unload_dn_sched called for WF2Q+
[ 9544.123872] unload_dn_sched ref_count = 0
[ 9544.123877] unload_dn_sched dn_sched WF2Q+ unloaded
[ 9544.123882] +++ end module 4 dn_fifo dn_fifo at fe98c9c4 order 0x5
[ 9544.123887] unload_dn_sched called for FIFO
[ 9544.123891] unload_dn_sched ref_count = 0
[ 9544.123896] unload_dn_sched dn_sched FIFO unloaded
[ 9544.123901] +++ end module 3 dummynet dummynet at fe98c99c order 0x4
[ 9544.123909] +++ end module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9544.123923] +++ end module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9544.123927] IP firewall unloaded
[ 9544.123932] +++ end module 0 ipfw ipfw at fe98c980 order 0x1
[ 9544.123936] ipfw_module_init error
[ 9575.918399] my_mod_register ipfw called
[ 9575.918405] my_mod_register sy_ipfw called
[ 9575.918410] my_mod_register sy_Vnet_ipfw called
[ 9575.918414] my_mod_register dummynet called
[ 9575.918418] my_mod_register dn_fifo called
[ 9575.918423] my_mod_register dn_wf2qp called
[ 9575.918427] my_mod_register dn_rr called
[ 9575.918431] my_mod_register dn_qfq called
[ 9575.918436] init_children mod_idx value 8
[ 9575.918442] +++ start module 0 ipfw ipfw at feb3b980 order 0x1
[ 9575.918448] +++ start module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9575.918454] ipfw2 initialized, divert loadable, nat loadable, rule-based forwarding disabled, default to accept, logging
[ 9575.918460] disabled
[ 9575.918465] +++ start module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9575.918525] +++ start module 3 dummynet dummynet at feb3b99c order 0x4
[ 9575.918536] +++ start module 4 dn_fifo dn_fifo at feb3b9c4 order 0x5
[ 9575.918542] load_dn_sched dn_sched FIFO loaded
[ 9575.918547] +++ start module 5 dn_wf2qp dn_wf2qp at feb3ba44 order 0x6
[ 9575.918552] load_dn_sched dn_sched WF2Q+ loaded
[ 9575.918557] +++ start module 6 dn_rr dn_rr at feb3bac4 order 0x7
[ 9575.918562] load_dn_sched dn_sched RR loaded
[ 9575.918568] +++ start module 7 dn_qfq dn_qfq at feb3bb44 order 0x8
[ 9575.918573] load_dn_sched dn_sched QFQ loaded
[ 9575.918580] +++ end module 7 dn_qfq dn_qfq at feb3bb44 order 0x8
[ 9575.918585] unload_dn_sched called for QFQ
[ 9575.918589] unload_dn_sched ref_count = 0
[ 9575.918594] unload_dn_sched dn_sched QFQ unloaded
[ 9575.918599] +++ end module 6 dn_rr dn_rr at feb3bac4 order 0x7
[ 9575.918604] unload_dn_sched called for RR
[ 9575.918608] unload_dn_sched ref_count = 0
[ 9575.918612] unload_dn_sched dn_sched RR unloaded
[ 9575.918618] +++ end module 5 dn_wf2qp dn_wf2qp at feb3ba44 order 0x6
[ 9575.918622] unload_dn_sched called for WF2Q+
[ 9575.918627] unload_dn_sched ref_count = 0
[ 9575.918632] unload_dn_sched dn_sched WF2Q+ unloaded
[ 9575.918637] +++ end module 4 dn_fifo dn_fifo at feb3b9c4 order 0x5
[ 9575.918642] unload_dn_sched called for FIFO
[ 9575.918646] unload_dn_sched ref_count = 0
[ 9575.918651] unload_dn_sched dn_sched FIFO unloaded
[ 9575.918656] +++ end module 3 dummynet dummynet at feb3b99c order 0x4
[ 9575.918664] +++ end module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9575.918679] +++ end module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9575.918684] IP firewall unloaded
[ 9575.918689] +++ end module 0 ipfw ipfw at feb3b980 order 0x1
[ 9575.918693] ipfw_module_init error
[ 9584.237841] my_mod_register ipfw called
[ 9584.237857] my_mod_register sy_ipfw called
[ 9584.237869] my_mod_register sy_Vnet_ipfw called
[ 9584.237880] my_mod_register dummynet called
[ 9584.237891] my_mod_register dn_fifo called
[ 9584.237898] my_mod_register dn_wf2qp called
[ 9584.237910] my_mod_register dn_rr called
[ 9584.237926] my_mod_register dn_qfq called
[ 9584.237937] init_children mod_idx value 8
[ 9584.237954] +++ start module 0 ipfw ipfw at fecea980 order 0x1
[ 9584.237967] +++ start module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9584.237983] ipfw2 initialized, divert loadable, nat loadable, rule-based forwarding disabled, default to accept, logging
[ 9584.237995] disabled
[ 9584.238011] +++ start module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9584.238076] +++ start module 3 dummynet dummynet at fecea99c order 0x4
[ 9584.238087] +++ start module 4 dn_fifo dn_fifo at fecea9c4 order 0x5
[ 9584.238093] load_dn_sched dn_sched FIFO loaded
[ 9584.238099] +++ start module 5 dn_wf2qp dn_wf2qp at feceaa44 order 0x6
[ 9584.238105] load_dn_sched dn_sched WF2Q+ loaded
[ 9584.238111] +++ start module 6 dn_rr dn_rr at feceaac4 order 0x7
[ 9584.238116] load_dn_sched dn_sched RR loaded
[ 9584.238121] +++ start module 7 dn_qfq dn_qfq at feceab44 order 0x8
[ 9584.238127] load_dn_sched dn_sched QFQ loaded
[ 9584.238135] +++ end module 7 dn_qfq dn_qfq at feceab44 order 0x8
[ 9584.238140] unload_dn_sched called for QFQ
[ 9584.238144] unload_dn_sched ref_count = 0
[ 9584.238149] unload_dn_sched dn_sched QFQ unloaded
[ 9584.238155] +++ end module 6 dn_rr dn_rr at feceaac4 order 0x7
[ 9584.238159] unload_dn_sched called for RR
[ 9584.238163] unload_dn_sched ref_count = 0
[ 9584.238168] unload_dn_sched dn_sched RR unloaded
[ 9584.238175] +++ end module 5 dn_wf2qp dn_wf2qp at feceaa44 order 0x6
[ 9584.238180] unload_dn_sched called for WF2Q+
[ 9584.238184] unload_dn_sched ref_count = 0
[ 9584.238188] unload_dn_sched dn_sched WF2Q+ unloaded
[ 9584.238193] +++ end module 4 dn_fifo dn_fifo at fecea9c4 order 0x5
[ 9584.238198] unload_dn_sched called for FIFO
[ 9584.238202] unload_dn_sched ref_count = 0
[ 9584.238207] unload_dn_sched dn_sched FIFO unloaded
[ 9584.238213] +++ end module 3 dummynet dummynet at fecea99c order 0x4
[ 9584.238221] +++ end module 2 sy_Vnet_ipfw SYSINIT at (null) order 0x3
[ 9584.238234] +++ end module 1 sy_ipfw SYSINIT at (null) order 0x2
[ 9584.238239] IP firewall unloaded
[ 9584.238243] +++ end module 0 ipfw ipfw at fecea980 order 0x1
[ 9584.238248] ipfw_module_init error

 ps aux | grep ipfw_mod
root     11439  0.0  0.0   2200   640 pts/0    S+   23:56   0:00 grep ipfw_mod

[kesha]

ну по данному выводу сказать трудно что-то, сухое:

Код:

[ 9575.918693] ipfw_module_init error

малоинформативно, с этим выводом к разработчику (ядра, модуля) дистра...
а в /var/log/messages при этом что?  я бы на твоем месте не мучался...

[md5]

ну по данному выводу сказать трудно что-то, сухое:

Код:

[ 9575.918693] ipfw_module_init error

малоинформативно, с этим выводом к разработчику (ядра, модуля) дистра...
а в /var/log/messages при этом что?  я бы на твоем месте не мучался...

Сейчас попробую iptables с ядра грохнуть и модуль установить... едь ipfw должно станоится вместо iptables