› Forums › Network Management › ZeroShell › Level 7 filter on 3.0.0
- This topic is empty.
-
AuthorPosts
-
February 6, 2014 at 7:53 am #43851
maccowley
MemberI installed Zeroshell on a Zotac with an AMD-350 and it runs very well except of the level 7 filters.
I would like to setup a bridge for QOS like described in https://www.zeroshell.org/qos/. This should enhance the quality of our VOIP calls. The bridge works fine, but I couldn’t get the L7 filters running. I tried several of them like VOIP, Skype, FTP,.. without any results. I have made a special test class to monitor the effects without success.
When I look at the processor load I am pretty sure that there is no L7 filter running.Is it possible that this is a specific problem of the new 3.0 version?
Thanks for any ideas
—
maccowleyFebruary 6, 2014 at 2:28 pm #53170DrmCa
ParticipantQuality of your voip calls will only benefit from router’s QOS if your ISP supports QOS too. Been there done that.
Ping to voip proxy has times more impact than your router’s QOS alone.
February 6, 2014 at 7:35 pm #53171maccowley
MemberThis doesn’t help me to solve my problem.
First I have to control the bandwidth on our Internet line and then I can think of QOS of the provider.
February 6, 2014 at 7:57 pm #53172imported_fulvio
ParticipantCould you try to classify http traffic by using Layer 7 filter?
I need to understand if your problem is due to the Kernel L7 module or just to signature bugs.Regards
FulvioFebruary 6, 2014 at 9:05 pm #53173DrmCa
Participant@maccowley wrote:
This doesn’t help me to solve my problem.
First I have to control the bandwidth on our Internet line and then I can think of QOS of the provider.
A little while ago I had the same feeling. But then I realized, that I can QoS SIP/RTP for all I wanted, but provider would just ignore my attempts and transfer all packets in the order received, thus negating any attempts at QoS on my side.
What are you trying to achieve? Prioritizing Voip traffic over HTTP?
This is what’s going to happen: someone on your LAN is downloading a file while you are trying to talk over your Voip phone. Your provider does not know about that. You configured ZS to prioritize Voip traffic, but provider is still flooding you with HTTP packets of that download. What do you want the router to do?February 6, 2014 at 9:19 pm #53174maccowley
MemberQOS and traffic shaping works very well when using e.g. ip filters. This enhances the quality of VOIP.
If the router or in my case the bridge doesn’t acknowledge the http packets, your provider can’t flood your line. This is the basic method of handshake.
February 7, 2014 at 6:32 pm #53175DrmCa
Participant๐ There is no ACK for every packet.
February 7, 2014 at 10:29 pm #53176maccowley
MemberNone of the L7 filter works, even not http.
Filter with IP addresses or port numbers work without any problems.I read in the forum that there was a problem with 2.0 RC3 and L7 level filter, too. Maybe this is an older bug?
February 11, 2014 at 11:20 am #53177Saszka
MemberYes, L7 filter on Zeroshell 3.0 still not work property in router mode.
QoS when using ip filter or packet work, but when we choose L7 filter (http, voip etc), QoS don’t see packets.
February 11, 2014 at 10:11 pm #53178imported_fulvio
ParticipantIt seems that in bridge mode L7 filters work correctly.
I have not tried routed mode.
Regards
FulvioFebruary 14, 2014 at 12:02 pm #53179maccowley
MemberI started setting up the bridge from scratch and added a level 7 for http only. Not a single bit is assigned to the http class. Everything is default.
I can’t agree that the level 7 filters in bridge mode work correctly.
I will give version 2.0RC3 a try.
February 17, 2014 at 11:24 am #53180maccowley
MemberSame problem with 2.0.RC3: Level 7 filters don’t work. I have tried both: router and bridge mode. Other filters work flawless.
February 17, 2014 at 2:27 pm #53181lannet2k
MemberAlso looking in the traffic statistic the filtering is alway 0 all traffic goes to default.
March 3, 2014 at 7:44 am #53182timoguic
MemberI also tried to get the L7 filters to work on my setup in routed mode, but the statistics show the class does not fill. It actually works fine when using IP / ports combination.
I did not try it in bridged mode yet. It would be nice to have this fixed if it is a bug. I tried to look into it, no luck ๐
April 28, 2014 at 6:51 pm #53183sanctusmob
MemberStill nothing?
-
AuthorPosts
- You must be logged in to reply to this topic.