LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 04-15-2007, 02:10 PM   #1
enigma_0Z
Member
 
Registered: Apr 2005
Distribution: Ubuntu, RHEL, Darwin
Posts: 73

Rep: Reputation: 15
iptables firewall makes other internet connections slow down -- diagram included


OK...

Why, when I'm downloading something through my iptables-based firewall/router, do other computers' internet connections not connected through this firewall not slow down?

Here's how my network looks:

Code:
Comp1 -\  (iptables)
       |--- Comp5 --\
Comp2 -/            |
                    |
Comp3 --------------|-- HUB -- INTERNET
                    |
Comp4 --------------/
What this means, is that when Comp1, Comp2, or Comp5 (iptables) is downloading something, internet connections at Comp3 and Comp4 slow down alot, but if Comp3 or Comp4 is dowloading something; Comp1, Comp2, and Comp5 feel very little affect.
 
Old 04-15-2007, 06:55 PM   #2
irwinr
LQ Newbie
 
Registered: Dec 2004
Location: Texas
Distribution: Fedora Core 6, CentOS 4.4, CentOS 5
Posts: 14

Rep: Reputation: 0
If your explanation and diagram are correct, then what you are describing would not happen. Either it was just a coincidence that you felt the affects that you did, or something is not accurate in your network topology.

You might also want to do something a little more accurate than a 'feel' test. IE, do an ftp download and record the Kilobytes per second on each machine or something.

-Jeremy
 
Old 04-15-2007, 09:30 PM   #3
drpt
LQ Newbie
 
Registered: Mar 2007
Location: whereami Texas
Distribution: gentooo (don't you)
Posts: 9

Rep: Reputation: 0
speed test

http://www.dslreports.com/speedtest

pete
 
Old 04-15-2007, 11:51 PM   #4
datadisk10
LQ Newbie
 
Registered: Oct 2006
Posts: 3

Rep: Reputation: 0
Try NIC Bonding

NIC Bonding
To configure redundant network interfaces in a failover mode perform these procedures.


Locate the PCI Bus location of each NIC you want to be in the failover bond.

# grep bus-pci /etc/sysconfig/network/ifcfg-eth-id-<WWN>
Example:

# cd /etc/sysconfig/network
# grep bus-pci ifcfg-eth-id-00:18:8B:762:50
_nm_name='bus-pci-0000:05:00.0'
# grep bus-pci ifcfg-eth-id-00:18:8B:762:52
_nm_name='bus-pci-0000:07:00.0'

Use the current network configuration file as a template for your new bonded configuration.

# cp ifcfg-eth-id-<WWN> ifcfg-bond0
# vi ifcfg-bond0
Add the following
BONDING_MASTER=yes
BONDING_MODULE_OPTS='miimon=100 mode=1 use_carrier=1'
BONDING_SLAVE_0='<Your PCI Bus info>'
BONDING_SLAVE_1='<Your PCI Bus info>'
# rm ifcfg-eth-id-<WWN>
# rm ifcfg-eth-id-<WWN>

Update the kernel by adding the following lines to /etc/modprobe.conf

alias bond0 bonding
options bond0 mode=1 miimon=100

From the console restart the network. You may need to reboot.

# rcnetwork restart
and/or
# shutdown -r now

Bonding information can be found in /proc/net/bonding/bond0

[edit] Virtual Interfaces
If you need to additional IP addresses to an interface (such as bond0) you can modify the /etc/sysconfig/network/ifcfg-bond0 file. Reference the following example:

IPADDR_2='10.30.20.111'
NETMASK_2='255.255.252.0'
Then restart the network and check the status. Note that ifconfig will NOT show the additional IP's.

# rcnetwork restart
# ifstatus bond0

then enjoy :-)


thanks
Santhosh
 
Old 04-16-2007, 12:15 PM   #5
Liqua
LQ Newbie
 
Registered: Feb 2005
Location: Manchester, UK
Distribution: Still looking so trying them all !
Posts: 7

Rep: Reputation: 0
I agree with Jeremy - your explanation does not make sense. You have a maximum amount of bandwidth regardless of which machine uses it. If one of them is downloading a file that is being sent at less than your maximum all other machines will still "feel" fast. (Though like he also said use something less subjective - system monitor for instance)

I do not know how you have configured machine 5 - whilst it is acting as a firewall, is it also proxying web pages giving the illiusion that the web is still fast for machines 1 & 2 perhaps ?
 
Old 04-16-2007, 12:37 PM   #6
lazlow
Senior Member
 
Registered: Jan 2006
Posts: 4,362

Rep: Reputation: 172Reputation: 172
enigma

If that is a hub and not a switch or router, that could be the source of the problem. I forget what the proper term is but basically you can have a traffic jam.
 
Old 04-16-2007, 01:37 PM   #7
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 781
Blog Entries: 8

Rep: Reputation: 157Reputation: 157
lazlow has a point. Whenever I do large downloads and the connection is going through a hub (I do have a HUB on my LAN), I have a ton of collisions. I'm assuming this issue become worse as additional downloading hosts factor into the problem. Hubs are dumb devices and will broadcast packets across all its ports and it doesn't help that they are 10-base. Take the hub out of the equation and test to determine if it is the issue (or replace with a switch)...doing that may negate your FW's function but you're just trying to determine the bottleneck at this point in the troubleshooting.
 
Old 04-17-2007, 03:07 PM   #8
archtoad6
Senior Member
 
Registered: Oct 2004
Location: Houston, TX (usa)
Distribution: MEPIS, Debian, Knoppix,
Posts: 4,727
Blog Entries: 15

Rep: Reputation: 231Reputation: 231Reputation: 231
Assuming that the device you are calling a "hub" is a true hub & not a switch, unixfool & lazlow probably have it right: your problem probably is that a hub is subject to collisions, where a true switch would not be.

Speed makes almost no difference: even at only 10 MB/s, it's about 2-6x faster than the average broadband connection. It's the traffic jams due to the packet collisions that are the problem.


BTW, while it is true that most hubs are/were only 10 MB/s, some are/were 10/100 just like modern routers & switches. Not that it cost me the $699 original retail price mentioned in the article below, but I am using a 10/100 hub/switch in my LAN right now (as I type). It's a SOHOware "SuperFlex 16-Port Dual Speed Hub" (NDS316). Hub port 16 is dead, but other than that it works fine in my current topology. I have my 3 main boxen on the switch ports & the 'Net + the rest on the hub section. Speed where I need it & not where I don't. Fortunately, there are few occasions when any of "the rest" do d/l's that would cause the collisions you are apprently experiencing.

If you're interested "ancient wisdom", aka "olds" or "blast from the past", check out this article: DUAL-SPEED WORKGROUP HUBS January 25, 1999 by J.B. Miles. To get to the actual mention of this hub, search for "NDS316" -- the specifics are almost at the end.
 
Old 04-24-2007, 12:00 PM   #9
enigma_0Z
Member
 
Registered: Apr 2005
Distribution: Ubuntu, RHEL, Darwin
Posts: 73

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by Liqua
I agree with Jeremy - your explanation does not make sense. You have a maximum amount of bandwidth regardless of which machine uses it. If one of them is downloading a file that is being sent at less than your maximum all other machines will still "feel" fast. (Though like he also said use something less subjective - system monitor for instance)

I do not know how you have configured machine 5 - whilst it is acting as a firewall, is it also proxying web pages giving the illiusion that the web is still fast for machines 1 & 2 perhaps ?
Comp5 is just a firewall & webserver, no proxying involved. Trust me, I would have thought of that...

Quote:
Originally Posted by archtoad6
Assuming that the device you are calling a "hub" is a true hub & not a switch, unixfool & lazlow probably have it right: your problem probably is that a hub is subject to collisions, where a true switch would not be.

Speed makes almost no difference: even at only 10 MB/s, it's about 2-6x faster than the average broadband connection. It's the traffic jams due to the packet collisions that are the problem.


BTW, while it is true that most hubs are/were only 10 MB/s, some are/were 10/100 just like modern routers & switches. Not that it cost me the $699 original retail price mentioned in the article below, but I am using a 10/100 hub/switch in my LAN right now (as I type). It's a SOHOware "SuperFlex 16-Port Dual Speed Hub" (NDS316). Hub port 16 is dead, but other than that it works fine in my current topology. I have my 3 main boxen on the switch ports & the 'Net + the rest on the hub section. Speed where I need it & not where I don't. Fortunately, there are few occasions when any of "the rest" do d/l's that would cause the collisions you are apprently experiencing.

If you're interested "ancient wisdom", aka "olds" or "blast from the past", check out this article: DUAL-SPEED WORKGROUP HUBS January 25, 1999 by J.B. Miles. To get to the actual mention of this hub, search for "NDS316" -- the specifics are almost at the end.
Yes, I know it's a hub... well I'm pretty sure anyways. The box said "hub", and it comes with the uplink port that is a crossover port... It's a cheapo d-link (prolly like 10 dollars, I forget) hub.

Didn't think about collisions... that's probably it, but then why don't the downloads that are holding up the network slow down significantly? These downloads keep their bandwidth and everything else suffers...

[edit]
oh yeah, and the box said not to plug in an active device when the hub is on, or things will get wonky... if that helps determine the type of network device...
[/edit]

Last edited by enigma_0Z; 04-24-2007 at 12:03 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
need help with firewall/router with 2 internet connections and 2 LANs dajasc Linux - Networking 6 04-07-2007 08:13 PM
xmule makes internet very slow on mandrake 10 nboul Linux - Software 3 10-20-2004 04:54 PM
Mandrake Firewall Internet Connections apoc63 Mandriva 4 06-02-2004 02:40 PM
Firewall - iptables - ftp connections cubee Linux - Security 22 01-29-2004 11:12 AM
iptables internet to firewall problem. remigus Linux - Networking 2 09-29-2003 02:27 PM


All times are GMT -5. The time now is 02:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration