From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io0-x244.google.com (mail-io0-x244.google.com [IPv6:2607:f8b0:4001:c06::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 9C69F3B25E for ; Mon, 26 Sep 2016 21:52:37 -0400 (EDT) Received: by mail-io0-x244.google.com with SMTP id y139so121809ioy.1 for ; Mon, 26 Sep 2016 18:52:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=C9q931pUzQv4/EJS/WLTkWtiW3XKdvOXu/hZ0fGLxPI=; b=CN76bUlTPm945yDn8HCc7yBudBEGcOW+GFj7G7rPwNlg6CDWjArwtmZ9ibH7tnz1ox K9Nh6MVwfKmRRJj7obusqCP+FqOyBJXj8KySoiw8ILNj283q1m+P14jWy5jGwKN67cQh XdeOZR6J5POePzqBBm0KNgx4EupUolnmTYPsMNSP2GMM8NmuF+R60E65PYv/6FA+triJ HJrQPoduX2wD5ZCab29QQbKg7kRqcyYbVawRNc381/wgWjPN86xsKwsz+oOWSjLPJtD/ /T3cd4la6fl0he9/Hk/E6YgoSGiveMYfV8BH1dzJU6L15Ltt7qak9eWNzQDXbtl/Q8AO WdKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=C9q931pUzQv4/EJS/WLTkWtiW3XKdvOXu/hZ0fGLxPI=; b=hhOjmmXaviZrUUg4cba9zKxOo7fusN2r1sQbOUqUPkJRRoUWLK+xXNZ36DrOVXTeOz t3VxGicIGUh+9TzDa+7rJzf1LY42T5f2SUXfOkoHxDZR4q9UWWNTxC8B6RfS0Oe8+9gL Mpit/vLWwLw3vIZ+U5CxJ5X3y1N2W6lIjPrLTzNXCF7ctbGl5v/4kczvus6CTnZAaQcX 18ZilYzVwO+xvVZvuFaNmPNH4hw7WkynwLl0Bh9K5pvRkVwLS+W9VzSC6g4BrLajWfmc oPjsOcJuhOD5E5STGDBvR0HdM0gLPbS+XQxAQwJRPzmS8fJEzN6zCrm5uYaSfA/OwDmR Atpw== X-Gm-Message-State: AE9vXwNUNc6UN4e/aqefm74vufJuV5/nZhfxXrThhTPukyLyNIE0E1Jn0dq15W/ZZgIZbg== X-Received: by 10.107.137.68 with SMTP id l65mr26259733iod.70.1474941156518; Mon, 26 Sep 2016 18:52:36 -0700 (PDT) Received: from ?IPv6:2601:404:381:db8e:6c0e:1c1f:f7e5:899a? ([2601:404:381:db8e:6c0e:1c1f:f7e5:899a]) by smtp.gmail.com with ESMTPSA id x128sm4994057ite.22.2016.09.26.18.52.35 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Sep 2016 18:52:35 -0700 (PDT) To: cake@lists.bufferbloat.net References: <3a99770e-6350-471f-72b6-b209d7d77d75@darbyshire-bryant.me.uk> From: Noah Causin Message-ID: <83b95479-c1f5-3589-912c-abe427805449@gmail.com> Date: Mon, 26 Sep 2016 21:52:33 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <3a99770e-6350-471f-72b6-b209d7d77d75@darbyshire-bryant.me.uk> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [Cake] de-natting & host fairness X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Sep 2016 01:52:37 -0000 I've been trying to compile this on LEDE, but I get this error: Package kmod-sched-cake is missing dependencies for the following libraries: nf_conntrack.ko On 9/25/2016 11:20 PM, Kevin Darbyshire-Bryant wrote: > Greetings! > > A while back I started on a quest to make cake 'nat' aware as the lack > of host fairness in a typical home router environment was the only > thing that prevented cake from being the ultimate qdisc in my > opinion. This involves dealing with conntrack which on egress is easy > (the kernel fills in a data structure for us), ingress is less clear. > I hacked something together but wasn't really happy with it. > > Another github user 'tegularius' presented some beautifully crafted > code that did the lookups in a much neater way. Originally it too had > an 'ingress' lookup problem. This was worked on and I hacked some > conditional 'denat' options into cake & tc. > > For your 'delight' a denat cake > https://github.com/kdarbyshirebryant/sch_cake/tree/natoptions along > with a matching tc https://github.com/kdarbyshirebryant/tc-adv/tree/denat > > Typically I use 'dual-srchost srcnat' options on the egress interface, > with 'dual-dsthost dstnat' in the ingress ifb interface. In *brief* > testing, bandwidth is shared fairly between hosts, and fairly by flow > within each host. And it's not crashed yet. > > Kevin > _______________________________________________ > Cake mailing list > Cake@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cake