From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-it0-x229.google.com (mail-it0-x229.google.com [IPv6:2607:f8b0:4001:c0b::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 92AEC3B260 for ; Thu, 10 Nov 2016 20:55:30 -0500 (EST) Received: by mail-it0-x229.google.com with SMTP id u205so86677596itc.0 for ; Thu, 10 Nov 2016 17:55:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=wjuHR7JXadtrBVcV+J4aitb2Oe7PyEQioh7yK9MIcwI=; b=YRhSGFrWILoCMOh92NnZF6MY1aBXd1lLfj2+afVg/RJ8MO3zS/G5T3CBnFJhUph5/2 rEB3kGEJqM62qBLXPtmo4VAQI9Qe4ifeWSyKLw6XrC5QVn6VsDP72J/tGJGOPnrb/V0g i0ehqS/IXLjlExDXW5Z32kuqV8xlUceLPajSp7Dw4+wwbZM5F28JuN3P3beVIuqUT+q6 na61UAFDdZGzhHCF8NkIUGQB91csp95+cuH0XiXaJZVhneQylDyS8wZY4rWuBGAp6khn Tf+OXN4o6g2x0P8Klk/uHyP5azmWo6FD5Ye1WMCpqEKVfi+84TD7i1iZWNKJC6ntIPut 9VOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=wjuHR7JXadtrBVcV+J4aitb2Oe7PyEQioh7yK9MIcwI=; b=nAwYndERAK0e27XhCV8/q9nuXTbHa8wA7v5Sa5MbTqFf+AOagDFnPxuSewS8ZgqzDZ 69mddlQ7rTJva5QyJq68Tn7fRWD3E5G9hYpnafVpW1H7gZFmfqFv47W+XUHSrOehYMRh HCKJvbyHZh6/dcczQkc+LIU9I+4C9EHiz7F0X1+L4n6QyfiDUR4eImRVkjZ9A7uBbuHg U/iz5Ac0KhICY53gd2sv9PQhEmg9lpA6VOV0qxIDEAWhcHHpAQA8OBPyUNVxmPd4v928 OUfjbVDfWr6xojAN4ebf1KqVhvFBeMxO71ADCx2swMZomAluQ/X5pTfd3hPwfu8juPYo n5sA== X-Gm-Message-State: ABUngvch2FYNAdNHR/3VojxfA7gpSk5rXOmYgSeSaBdXHUrj+ogvJKzDnavd2s3K/m2MwA== X-Received: by 10.36.250.201 with SMTP id v192mr7059186ith.106.1478829329911; Thu, 10 Nov 2016 17:55:29 -0800 (PST) Received: from [10.0.0.5] (c-68-42-142-136.hsd1.mi.comcast.net. [68.42.142.136]) by smtp.gmail.com with ESMTPSA id p64sm11042341itb.21.2016.11.10.17.55.29 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 10 Nov 2016 17:55:29 -0800 (PST) To: cake@lists.bufferbloat.net From: Noah Causin Message-ID: <3e5942d2-6d6b-0e01-8aa6-98c3535c26ef@gmail.com> Date: Thu, 10 Nov 2016 20:55:27 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Subject: [Cake] Cake with Deep Packet Inspection X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Nov 2016 01:55:30 -0000 I finally got my project working. I integrated the NDPI Deep Packet Inspection engine into my LEDE build, so I could prioritize applications using Cake. http://www.ntop.org/products/deep-packet-inspection/ndpi/ NDPI integrates into IPTables, which allows me to DSCP mark packets. Cake reads the DiffServ markings and puts the traffic into appropriate classes. I found a Makefile which successfully compiles: https://github.com/981213/lede_src/blob/0d344bc2958838dcbc547a8f0a3d8842e6f6d2f8/package/my_package/ndpi-netfilter/Makefile The system works very well. Steam traffic is deprioritized to allow applications like YouTube, Netflix, and Skype to receive higher amounts of the available bandwidth. What I do for ingress is bridge two ports on an extra router, enable bridge firewalling, and create IPTables rules to mark downstream packets. The router I use is a D-Link DGL-5500, which is comparable to an Archer C7. IPv6 support is not available in this netfilter module, but the IPv4 support is great. Noah Causin