I have a new clean install of the latest clearOS community edition. It is set as the gateway and firewall. Everything works great until I enable the QoS Engine. Then the firewall/gatewall goes into panic mode. I included a screenshot of the QoS settings, they are for our VOIP phones. the ICMP and nontcp rules were there by default. I did try to remove them and it still goes to panic mode. I also removed the rate to quantum (is that the rate to set aside for QoS) but still it goes to panic mode.
I also did blacklist nfnetlink_queue as was suggested in another forum post, still goes into panic mode.
We have 200Mbps/200Mbps internet speeds and have 2GB network cards.
The modules loaded are Antivirus, Antiphishing, Intrusion detection and Intrusion Prevention modules loaded as well.
Any thoughts?
-----I may have figured it out, I guess you cannot leave the protocol at "Any" i had to specify a rule for TCP and another for UDP in both up and down stream
----The rate to quantum, is that the rate to set aside for the QoS rules?
I also did blacklist nfnetlink_queue as was suggested in another forum post, still goes into panic mode.
We have 200Mbps/200Mbps internet speeds and have 2GB network cards.
The modules loaded are Antivirus, Antiphishing, Intrusion detection and Intrusion Prevention modules loaded as well.
Any thoughts?
-----I may have figured it out, I guess you cannot leave the protocol at "Any" i had to specify a rule for TCP and another for UDP in both up and down stream
----The rate to quantum, is that the rate to set aside for the QoS rules?
Share this post:
Responses (1)
-
Accepted Answer
To quote the lead developer, "Rate to Quantum is ... quite annoying"
It is a fine tuning parameter to determine whether the packet should be delayed (soft limit) or dropped (hard limit). It is associated with the pipe size. In most cases this should be hidden. It should be calculated dynamically which is done by ClearOS already. Anything other than dynamic is really for admins who understand it. It will likely be removed in further interfaces since it isn't useful. It will work in the configuration file always for high level admins.
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »