ok.
Two different systems have crashed since
2.6.25 upgrade (I upgraded a total of 8
systems).
For now, the only two boxes that crashed
have these modules loaded (where the other
systems doesn't have these modules loaded):
sch_sfq 6088 3
sch_htb 15208 1
cls_fw 3848 1
Here is the script for setup htb (which classify
traffic inside the ipsec tunnels):
tc qdisc add dev eth0 root handle 1:0 htb default 11
tc class add dev eth0 parent 1:0 classid 1:1 htb rate 1700kbit ceil
1700kbit burst 15k
tc class add dev eth0 parent 1:1 classid 1:10 htb rate 200kbit ceil
400kbit burst 5k
tc class add dev eth0 parent 1:1 classid 1:11 htb rate 600kbit ceil
1600kbit burst 5k
tc class add dev eth0 parent 1:1 classid 1:12 htb rate 800kbit ceil
1700kbit burst 15k
tc qdisc add dev eth0 parent 1:10 handle 10:0 sfq perturb 10
tc qdisc add dev eth0 parent 1:11 handle 20:0 sfq perturb 5
tc qdisc add dev eth0 parent 1:12 handle 30:0 sfq perturb 10
FW="tc filter add dev eth0 protocol ip parent 1:0 prio 1"
$FW handle 110 fw flowid 1:10
$FW handle 111 fw flowid 1:11
$FW handle 112 fw flowid 1:12
--