Re: [Cake] act_conndscp

[Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>]

And another - sorry! - some stats/info

overlimits counts the number of packets that have had their DSCP overwritten/restored/set
requeues counts the number of times the ’statemask’ bit has been SET.

root@Router:~# tc -s filter show dev eth0
filter parent cacf: protocol all pref 10 u32 chain 0 
filter parent cacf: protocol all pref 10 u32 chain 0 fh 800: ht divisor 1 
filter parent cacf: protocol all pref 10 u32 chain 0 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 not_in_hw 
  match 00000000/00000000 at 0
	action order 1: conndscp zone 0 pipe
	 index 1 ref 1 bind 1 mask 0xfc000000 statemask 0x01000000 mode both installed 218013 sec used 0 sec
	Action statistics:
	Sent 1048008900 bytes 7586620 pkt (dropped 0, overlimits 5263898 requeues 87634) 
	backlog 0b 0p requeues 87634

So the above shows that 5263898 packets had their DSCP values set based on a stored DSCP value and thus avoided going through the iptables rules.  87634 packets set that stored value.


root@Router:~# tc -s filter show dev eth0 ingress
filter parent ffff: protocol all pref 10 u32 chain 0 
filter parent ffff: protocol all pref 10 u32 chain 0 fh 800: ht divisor 1 
filter parent ffff: protocol all pref 10 u32 chain 0 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 not_in_hw 
  match 00000000/00000000 at 0
	action order 1: conndscp zone 0 pipe
	 index 2 ref 1 bind 1 mask 0xfc000000 statemask 0x01000000 mode set installed 218027 sec used 0 sec
	Action statistics:
	Sent 7942289574 bytes 9601486 pkt (dropped 0, overlimits 6153697 requeues 0) 
	backlog 0b 0p requeues 0

	action order 2: mirred (Egress Redirect to device ifb4eth0) stolen
 	index 1 ref 1 bind 1 installed 218027 sec used 0 sec
 	Action statistics:
	Sent 7942289574 bytes 9601486 pkt (dropped 0, overlimits 0 requeues 0) 
	backlog 0b 0p requeues 0

The above shows that 6153697 packets had their DSCP values restored from the stored mark value.  Note DSCPs are only restored if they’re actually different from the current stored value, so a default DSCP of 0 on an egress path is unlikely to generate a whole load of unnecessary DSCP overwriting on the ingress path.

Does any of this help?

Kevin

> On 20 Mar 2019, at 09:06, Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> wrote:
> 
> Addendum: If not obvious.  There are two separate instances of ‘conndscp’, one on the egress path (in ‘both’ mode) and one on the ingress path (in ’set’ mode)
> 
> Cheers,
> 
> Kevin D-B
> 
> gpg: 012C ACB2 28C6 C53E 9775  9123 B3A2 389B 9DE2 334A
> 
> _______________________________________________
> Cake mailing list
> Cake@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cake


Cheers,

Kevin D-B

gpg: 012C ACB2 28C6 C53E 9775  9123 B3A2 389B 9DE2 334A