From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from nov-007-i609.relay.mailchannels.net (nov-007-i609.relay.mailchannels.net [46.232.183.163]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 541F43B29E for ; Fri, 8 Dec 2017 06:17:33 -0500 (EST) X-Sender-Id: netnames|x-authuser|sagermail@sager.me.uk Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id F3812560812 for ; Fri, 8 Dec 2017 11:17:26 +0000 (UTC) Received: from smtp3.easily.co.uk (unknown [100.96.21.17]) (Authenticated sender: netnames) by relay.mailchannels.net (Postfix) with ESMTPA id 446C4560949 for ; Fri, 8 Dec 2017 11:17:26 +0000 (UTC) X-Sender-Id: netnames|x-authuser|sagermail@sager.me.uk Received: from smtp3.easily.co.uk (smtp3.easily.co.uk [172.18.44.71]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:2500 (trex/5.11.3); Fri, 08 Dec 2017 11:17:26 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: netnames|x-authuser|sagermail@sager.me.uk X-MailChannels-Auth-Id: netnames X-Trouble-Decisive: 458c347401e20d91_1512731846806_2129860738 X-MC-Loop-Signature: 1512731846806:582901428 X-MC-Ingress-Time: 1512731846806 Received: from [81.2.83.97] (port=52548 helo=mainserver.wc) by smtp3.easily.co.uk with esmtpa (Exim 4.43) id 1eNGei-0005rR-Bp for cake@lists.bufferbloat.net; Fri, 08 Dec 2017 11:17:24 +0000 Received: from localhost ([127.0.0.1]) by mainserver.wc with esmtp (Exim 4.86_2) (envelope-from ) id 1eNGeh-00010g-VY for cake@lists.bufferbloat.net; Fri, 08 Dec 2017 11:17:24 +0000 To: cake@lists.bufferbloat.net References: <772b6eb3-065e-ea22-0895-74516bceebb5@sager.me.uk> <1512687942.28287.2.camel@gmail.com> From: John Sager Message-ID: <399a0d51-59f1-6eb4-6744-a3b1cb6fb56c@sager.me.uk> Date: Fri, 8 Dec 2017 11:17:23 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <1512687942.28287.2.camel@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 7bit X-AuthUser: sagermail@sager.me.uk Subject: Re: [Cake] dscp marking ingress traffic (was (no subject)) X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Dec 2017 11:17:35 -0000 That would work for a single LAN interface but I run several internal vlans off my router and I need to manage the ingress traffic at a single point. I haven't yet found a way of doing that other than with the ifb stuff. I could run two virtual routers in tandem but I don't think the distro I'm using (Leaf-Bering) supports that easily. John On 07/12/17 23:05, Georgios Amanakis wrote: > You can do it, but it has to be on a different interface than the > incoming traffic. > Say incoming traffic is on eth0 (WAN) and outgoing LAN traffic is on > eth1. Then you can DSCP mark with iptables on incoming eth0, and since > the traffic is forwarded to eth1 the DSCP marking is going to be > preserved. > > On Thu, 2017-12-07 at 22:48 +0000, John Sager wrote: >> I've wondered that, and at the moment I don't think there is. The >> ingress >> qdisc stuff happens before the packets hit any iptables hooks so you >> can't >> use iptables rules to do it. None of the actions that can be attached >> to a >> filter on the ingress qdisc seem to offer what you want. >> >> I use packet marks and connmarks to classify outgoing traffic using >> iptables >> rules. The connmarks are then transferred back to incoming packets >> using the >> connmark action, followed by the mirred action to send them to ifb0 >> where >> the real downstream qdiscs - htb and fq_codel - are applied. This >> works well >> to partition my upstream & downstream bandwidth between different >> traffic >> classes, but I can't yet see how to adapt this to work with cake. >> >> John >> >> >> On 07/12/17 13:34, Mark Captur wrote: >>> I am using cake on latest lede nightly. I'm using diffserv 4 which >>> creates 4 >>> tins bulk, best effort, video and voice. >>> >>> Is there a way to change dscp markings on in comming traffic to >>> place it in >>> te video tin. More specifically i would like all incoming traffic >>> with >>> source port 23000 to be set to dscp class CS4. >>> >>> Thanks, >>> Mark >>> >> >> _______________________________________________ >> Cake mailing list >> Cake@lists.bufferbloat.net >> https://lists.bufferbloat.net/listinfo/cake