Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
1
News and Announcements / l7 filter support - install fails on repos
« on: March 31, 2009, 07:48:51 am »
Hi,
I installed the l7-kernel on an IBM Dual CPU Xeon server.
I found two points:
First the l7 kernel is older than the released kernel in EboX v1.0, so Grub defaults to selecting the non-l7 kernel
Second, the repos didn't work for me.
<snip>
Code:
sudo apt-get install ebox-l7-protocols iptables
</snip>
I manually opened the repos in a web browser and found that it appears the correct (or closest available) package to install was
<snip>
Code:
sudo apt-get install l7-protocols iptables
</snip>
I hope this might help someone else. Now the next question is, is there anyone else out there using this yet and did you have some success / experiences to share (either in classifying or in shaping)?
Thanks,
P
I installed the l7-kernel on an IBM Dual CPU Xeon server.
I found two points:
First the l7 kernel is older than the released kernel in EboX v1.0, so Grub defaults to selecting the non-l7 kernel
Second, the repos didn't work for me.
<snip>
Code:
sudo apt-get install ebox-l7-protocols iptables
</snip>
I manually opened the repos in a web browser and found that it appears the correct (or closest available) package to install was
<snip>
Code:
sudo apt-get install l7-protocols iptables
</snip>
I hope this might help someone else. Now the next question is, is there anyone else out there using this yet and did you have some success / experiences to share (either in classifying or in shaping)?
Thanks,
P
2
Installation and Upgrades / Re: Could not install on T41 Laptop due to Kernel dependency (bootup message)
« on: January 12, 2009, 10:19:41 pm »
Hi all,
Reoplying to my own post here, rather than deleting it, for the benefit of others. What I found from some more digging is that this is an Ubuntu Server issue, not Hardy specific. If you are installing on a virtual machine there is a workarouind here http://blog.networkfoo.org/?p=170 :
<snip>
To fix I did the following:
Shutdown the VM.
Open the settings on the VM through the Sun xVM VirtualBox manager
General -> Advanced -> check Enable PAE/NX
Start your VM
Alternatively, with Ubuntu, you should be running the virtual kernel. Install server as normal, then before rebooting hit alt-f2 to get a shell. Run “chroot /target”. Then “apt-get install linux-virtual”. You could also do the same by booting for the install CD and selecting the option to repair the install and running apt-get from there.
<snip>
If, like me, you are installing as a "real" install it seems there is no workaround, although maybe you might get lucky with some BIOS settings. Basically I´m going to install Ubuntu Desktop version instead and then try again.
Best regards,
jon
Reoplying to my own post here, rather than deleting it, for the benefit of others. What I found from some more digging is that this is an Ubuntu Server issue, not Hardy specific. If you are installing on a virtual machine there is a workarouind here http://blog.networkfoo.org/?p=170 :
<snip>
To fix I did the following:
Shutdown the VM.
Open the settings on the VM through the Sun xVM VirtualBox manager
General -> Advanced -> check Enable PAE/NX
Start your VM
Alternatively, with Ubuntu, you should be running the virtual kernel. Install server as normal, then before rebooting hit alt-f2 to get a shell. Run “chroot /target”. Then “apt-get install linux-virtual”. You could also do the same by booting for the install CD and selecting the option to repair the install and running apt-get from there.
<snip>
If, like me, you are installing as a "real" install it seems there is no workaround, although maybe you might get lucky with some BIOS settings. Basically I´m going to install Ubuntu Desktop version instead and then try again.
Best regards,
jon
3
Installation and Upgrades / Could not install on T41 Laptop due to Kernel dependency (bootup message)
« on: January 12, 2009, 08:45:35 pm »
Dear list,
I downloaded the custom distribution of EBox (based on Hardy) as a complete bootable CD as I wanted to install without putting first a base Ubuntu and then adding packages.
When I started the install all seemed to go well. I finished the first stage of the install from CD-ROM, ejected the CD, as asked, and rebooted the machine. When it tried to boot from the HDD, I went through GRUB ok and then immediaterly received an error similar to below:
"Can not boot; kernel version is incorrect, error 0:6"
Did anybody else have a similar problem and found a resolution?
I was using an IBM T41 laptop. Now I´m going to install Hardy LTS Server Base and then packages independently, but it is not my preferred choice.
Best regards,
Jon
I downloaded the custom distribution of EBox (based on Hardy) as a complete bootable CD as I wanted to install without putting first a base Ubuntu and then adding packages.
When I started the install all seemed to go well. I finished the first stage of the install from CD-ROM, ejected the CD, as asked, and rebooted the machine. When it tried to boot from the HDD, I went through GRUB ok and then immediaterly received an error similar to below:
"Can not boot; kernel version is incorrect, error 0:6"
Did anybody else have a similar problem and found a resolution?
I was using an IBM T41 laptop. Now I´m going to install Hardy LTS Server Base and then packages independently, but it is not my preferred choice.
Best regards,
Jon
4
Installation and Upgrades / Re: Layer 7 traffic shaping not working on Intrepid?
« on: January 05, 2009, 09:45:28 pm »
Hi Javi,
First thanks for the response about this. Secondly, sorry for the late reply; I didn't seem to get the update on the thread. Anyway, I'll try again with Hardy and hopefully have some inputs on performance to share. I'm particularly looking to use this solution to shape "E1" size satellite links so assuming things work ok, I'll probably be investigating EBox redundancy next.
As an aside, is there a specific way to check that the queuing and classification is functioning?
For example, I've used L7 filter before on dd-wrt and OpenWRT based hardware. It seems possible to track the efficacy of l7 connection tracking and marking by doing something like:
tail -f /proc/net/ip_conntrack | grep l7proto
but I've not found a way to really measure queue depths yet (except perhaps some sort of SNMP method aka Cisco IOS method) and verify that the actual CoS is being implemented.
Best regards,
Jon
First thanks for the response about this. Secondly, sorry for the late reply; I didn't seem to get the update on the thread. Anyway, I'll try again with Hardy and hopefully have some inputs on performance to share. I'm particularly looking to use this solution to shape "E1" size satellite links so assuming things work ok, I'll probably be investigating EBox redundancy next.
As an aside, is there a specific way to check that the queuing and classification is functioning?
For example, I've used L7 filter before on dd-wrt and OpenWRT based hardware. It seems possible to track the efficacy of l7 connection tracking and marking by doing something like:
tail -f /proc/net/ip_conntrack | grep l7proto
but I've not found a way to really measure queue depths yet (except perhaps some sort of SNMP method aka Cisco IOS method) and verify that the actual CoS is being implemented.
Best regards,
Jon
5
Installation and Upgrades / Re: Layer 7 traffic shaping not working on Intrepid?
« on: December 19, 2008, 07:15:53 pm »
<nudge>
6
Installation and Upgrades / Re: Routing Maddness!!!
« on: December 17, 2008, 08:32:52 pm »
I very quickly scanned the post... Did you set static return routes or some kind of dynamic route learning (like RIP) on the other routers?
So something like
On Router 10.44.200.1 you need a static route saying
For Destination: 10.44.200.32/27
Go Via 10.44.200.2
Good luck!
So something like
On Router 10.44.200.1 you need a static route saying
For Destination: 10.44.200.32/27
Go Via 10.44.200.2
Good luck!
7
Installation and Upgrades / Layer 7 traffic shaping not working on Intrepid?
« on: December 16, 2008, 12:55:48 am »
Hi all,
I followed the instructions on http://ebox-platform.com/archives/2008/08/31/70-new-traffic-shaping-with-layer-7-filter-support/ for installing the layer 7 filter. So far I can not get it to work.
CURRENT STATUS:
I installed linux-image-2.6.24-19-l7filter and successfully booted. I lost my ability to manage or use my wireless card (on my laptop) but that seems to be about the only disadvantage.
I also installed ebox-l7-protocols iptables although I can't be sure that iptables was changed.
SYMPTOMS:
So what I see is traffic filter module is installed. I can choose an interface and try to add a new rule. However, if I click on "Service" I can see and select "Port based service" but I can see and NOT select "Application based services" and the same for "Application based service group". The last two are both "greyed out". If I view the page in IE instead of Firefox I don't even see the greyed out options at all.
Can anyone suggest a way to more deeply check what went wrong please, or does anyone actually have this installed and running (especially on Intrepid)? The only thing I can think is that I'm running the wrong version of IPTables still perhaps?
I tried asking on the irc channel a few times in the last couple of days but did not get any responses. :-(
Many thanks and I apologise if this seems like a stupid question!
Ptarmigan
P.S. Also the installation instructions actually seem wrong as:
deb http://ebox-platform.com/testing/packages/l7kernel ./
does not seem to be a valid entry for /etc/apt/sources.list and broke my apt-get upgrade
In the end, I just went to deb http://ebox-platform.com/testing/packages/l7kernel and downloaded the file called linux-image-2.6.24-19-l7filter_2.6.24-19.34_i386.deb and installed it using a package manager.
I followed the instructions on http://ebox-platform.com/archives/2008/08/31/70-new-traffic-shaping-with-layer-7-filter-support/ for installing the layer 7 filter. So far I can not get it to work.
CURRENT STATUS:
I installed linux-image-2.6.24-19-l7filter and successfully booted. I lost my ability to manage or use my wireless card (on my laptop) but that seems to be about the only disadvantage.
I also installed ebox-l7-protocols iptables although I can't be sure that iptables was changed.
SYMPTOMS:
So what I see is traffic filter module is installed. I can choose an interface and try to add a new rule. However, if I click on "Service" I can see and select "Port based service" but I can see and NOT select "Application based services" and the same for "Application based service group". The last two are both "greyed out". If I view the page in IE instead of Firefox I don't even see the greyed out options at all.
Can anyone suggest a way to more deeply check what went wrong please, or does anyone actually have this installed and running (especially on Intrepid)? The only thing I can think is that I'm running the wrong version of IPTables still perhaps?
I tried asking on the irc channel a few times in the last couple of days but did not get any responses. :-(
Many thanks and I apologise if this seems like a stupid question!
Ptarmigan
P.S. Also the installation instructions actually seem wrong as:
deb http://ebox-platform.com/testing/packages/l7kernel ./
does not seem to be a valid entry for /etc/apt/sources.list and broke my apt-get upgrade
In the end, I just went to deb http://ebox-platform.com/testing/packages/l7kernel and downloaded the file called linux-image-2.6.24-19-l7filter_2.6.24-19.34_i386.deb and installed it using a package manager.
Pages: [1]