I have OBSD 3.6 on a soekris 4801 box and I run an asterisk pbx with IAX2 voip service with teliax. This uses udp port 4569 in both directions.
I have a reasonable DSL line with consistent 2mb down and 400Kb up.
I need to ensure that my asterisk box gets at least 512 down and 300 up. below is my ruleset, but when I look in pftop at the queue page, nothing ever gets tossed into my voip_int or voip_ext queue.
I would like for the voip box to be able to borrow more if it is avaiable, but I don't want any other kind of traffic to eat up what I want reserved for the VoIP traffic.
It is almost a certainty that I am misunderstanding how to configure CBQ and pass traffic to it.
Any help would be greatly appreciated!!!
altq on sis0 cbq bandwidth 400Kb queue { std_ext, voip_ext }
queue std_ext bandwidth 200Kb cbq(default borrow)
queue voip_ext bandwidth 300Kb priority 3 cbq(borrow)
altq on sis1 cbq bandwidth 100% queue { net_int }
queue net_int bandwidth 2.0Mb { std_int, voip_int }
queue std_int bandwidth 1Mb cbq(default borrow)
queue voip_int bandwidth 512Kb priority 2 cbq(borrow)
int_nets = "{ 192.168.3.0/24 }"
voip = "192.168.3.10"
binat on sis0 from 192.168.3.10 to any ->
rdr on sis0 proto { udp, tcp } from any to port 4569 -> 192.168.3.10 port 4569
nat on sis0 from 192.168.3.0/24 to any -> (sis0)
# default deny
block on { sis0, sis1 } all
# filter rules for sis0 inbound
pass in on sis0 proto tcp from any to sis0 port 22 \
flags S/SA keep state queue std_ext
# filter rules for sis0 outbound
pass out on sis0 from $int_nets to any keep state
pass out on sis0 from $voip to any port 4569 keep state queue voip_ext
# filter rules for sis1 inbound
pass in on sis1 from $int_nets to any keep state
pass in on sis1 proto tcp from $int_nets to sis1 port 22 flags S/SA keep state queue std_int
# filter rules for sis1 outbound
pass out on sis1 from sis1 to $int_nets
pass out on sis1 from any to $voip port 4569 queue voip_int
Anyone have any ideas on
Anyone have any ideas on this? I have a similar problem...and any suggestion could translate :)