From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2.tohojo.dk (mail2.tohojo.dk [77.235.48.147]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id C9AD721F706 for ; Tue, 6 Oct 2015 01:28:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at mail2.tohojo.dk DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=201310; t=1444120113; bh=LgENiF3AwB9UQTV0S10vuaTY3NYwG4Fvq/ySI9OPYOQ=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=diJieRgscui8+wye4J6OlaysuDFmGUjvCsEC/ceGcUx0B65fUYvjK920wXkf6aEqT L4yB6XMRFX+snYvuq/Zu8GB5XuBw4Kfb8zNYTQZMn+48tf46nTGtT1rAhQg6C7TsGf ZL0XGSD191XrYRAqh+KN7jLhrxwhCrNHIsNtTbgA= Received: by alrua-kau.kau.toke.dk (Postfix, from userid 1000) id 6EB60C40110; Tue, 6 Oct 2015 10:28:32 +0200 (CEST) From: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= To: Sebastian Moeller References: <0EB23696-5866-48C5-AC7E-B8570C7AA900@gmx.de> <561369A9.2090607@darbyshire-bryant.me.uk> <0F1BBA35-381C-4405-967A-3E266CFCC6F1@gmx.de> <87k2r02z4d.fsf@toke.dk> Date: Tue, 06 Oct 2015 10:28:32 +0200 In-Reply-To: (Sebastian Moeller's message of "Tue, 6 Oct 2015 10:27:26 +0200") X-Clacks-Overhead: GNU Terry Pratchett Message-ID: <87fv1o2yfj.fsf@toke.dk> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: cake@lists.bufferbloat.net Subject: Re: [Cake] flow_hash vs host_hash X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 08:28:58 -0000 Sebastian Moeller writes: > Hi Toke, > > On Oct 6, 2015, at 10:13 , Toke H=C3=B8iland-J=C3=B8rgensen wrote: > >> Sebastian Moeller writes: >>=20 >>> I believe you nailed it, but the pony will still work on egress, >>=20 >> Don't packets hit the qdisc after NAT has been applied? > > As far as I know not for IFBs; that is the reason why we need tc filters > on ingress and can not use netfilter. And why using iptables to map the D= SCP to > zero will still result in our shaper seeing the DSCP markings from upstre= am > (which I could confirm happening for IPv6, as my ISP conserved flent=E2= =80=99s DSCP > marks, so I saw nice priority band based stratification in flent's graphi= cs). I > think that IFBs predecessor IMQ was different in that regard. No, I meant on egress... -Toke