From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qt0-x235.google.com (mail-qt0-x235.google.com [IPv6:2607:f8b0:400d:c0d::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id A60663B29E for ; Thu, 7 Dec 2017 18:05:43 -0500 (EST) Received: by mail-qt0-x235.google.com with SMTP id 33so21948902qtv.1 for ; Thu, 07 Dec 2017 15:05:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:subject:from:to:date:in-reply-to:references:mime-version :content-transfer-encoding; bh=UPN00EafhzkTHmznAMpbK3Z3jTszaRwITpUXQZunu1U=; b=EESfrobnPyTXvRUHUXuxWT0Ry+w8wVMohdHSnz94DAvuqYXmZl9iIMQd/oEfrV6kQ8 pEFBfEs8tWv04VdpPojRdqgAYkYpFA5w6svdEaHJFCBal4gKSlx6Wic3e+Hpx7i/zvXX eI9+dEtjRJlvhr2xIchTHrzc3ZWXYyswY+b6DZFGg1A8q5nNXjHFL3joitjiMACXhx0V cNzjTXSo+tg3ShCmXUz2hfa6zbuNgOT8Y2YfGeNosxZxelLKTcTr/sw24MJ3xPgkN4rq HwWH9bezBzEOP/KUbA2dGTayNBNaqiCC1nRrWfFNHwWm6br0w1HLQWAhK09ZjtLJq8t2 DeMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:mime-version:content-transfer-encoding; bh=UPN00EafhzkTHmznAMpbK3Z3jTszaRwITpUXQZunu1U=; b=oi9QyLbzwRdn+O3cdoVO6CYuV66z/4K+A5atu+3+/aLcvTV1TVuVCc/DV6UkGkEWjp Ug3kZAb1BdXUV31JJQPIWyKHiuMx1rsB9Qq06t99qAzEJG+pR2T9Ch/6SSpvcwL4pLGf fK7v1+esqKFEAE2rNMvOf+8xVCtCcpKOGwngBvekRqDO81w+wqFFejPfQAAFdQ0CICJf sm+/o0DA1/rl2Fb4aVJxUAEmJvvXjABWBmeHdgp82VCS+vOrhfcLiaJDdYuX0AqdLH05 UiOBQkQPjTRp0jse1RJLGqX+4JCCOx3+1JGbGwbVXWJagl6lGTTeH6y7rnat3Zaay9Sd ULkw== X-Gm-Message-State: AKGB3mJGrpGMdllkxafWMnIpSiwzxJGewBcQESa4H5h+ZwaBkwjCmv43 bl8JQRMxo4iF3Sm77nQbSAZj3AVn X-Google-Smtp-Source: AGs4zMYYXqb93r0UvjH3tDcZnEmEndCPTaoNrVDJX8tLr7VwxmAPBjbRqf2zfbyrES7FpA0o8UQzTg== X-Received: by 10.55.126.198 with SMTP id z189mr34230286qkc.100.1512687942966; Thu, 07 Dec 2017 15:05:42 -0800 (PST) Received: from x3200 ([2601:152:4303:bd5::e8c4]) by smtp.googlemail.com with ESMTPSA id m1sm3949309qkl.93.2017.12.07.15.05.42 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 07 Dec 2017 15:05:42 -0800 (PST) Message-ID: <1512687942.28287.2.camel@gmail.com> From: Georgios Amanakis To: John Sager , cake@lists.bufferbloat.net Date: Thu, 07 Dec 2017 18:05:42 -0500 In-Reply-To: <772b6eb3-065e-ea22-0895-74516bceebb5@sager.me.uk> References: <772b6eb3-065e-ea22-0895-74516bceebb5@sager.me.uk> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.26.2 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: Re: [Cake] dscp marking ingress traffic (was (no subject)) X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Dec 2017 23:05:43 -0000 You can do it, but it has to be on a different interface than the incoming traffic. Say incoming traffic is on eth0 (WAN) and outgoing LAN traffic is on eth1. Then you can DSCP mark with iptables on incoming eth0, and since the traffic is forwarded to eth1 the DSCP marking is going to be preserved. On Thu, 2017-12-07 at 22:48 +0000, John Sager wrote: > I've wondered that, and at the moment I don't think there is. The > ingress > qdisc stuff happens before the packets hit any iptables hooks so you > can't > use iptables rules to do it. None of the actions that can be attached > to a > filter on the ingress qdisc seem to offer what you want. > > I use packet marks and connmarks to classify outgoing traffic using > iptables > rules. The connmarks are then transferred back to incoming packets > using the > connmark action, followed by the mirred action to send them to ifb0 > where > the real downstream qdiscs - htb and fq_codel - are applied. This > works well > to partition my upstream & downstream bandwidth between different > traffic > classes, but I can't yet see how to adapt this to work with cake. > > John > > > On 07/12/17 13:34, Mark Captur wrote: > > I am using cake on latest lede nightly. I'm using diffserv 4 which > > creates 4 > > tins bulk, best effort, video and voice. > > > > Is there a way to change dscp markings on in comming traffic to > > place it in > > te video tin. More specifically i would like all incoming traffic > > with > > source port 23000 to be set to dscp class CS4. > > > > Thanks, > > Mark > > > > _______________________________________________ > Cake mailing list > Cake@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cake