From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qk0-x22e.google.com (mail-qk0-x22e.google.com [IPv6:2607:f8b0:400d:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id CF2913B2A4 for ; Fri, 3 Feb 2017 12:08:31 -0500 (EST) Received: by mail-qk0-x22e.google.com with SMTP id s186so4432518qkb.1 for ; Fri, 03 Feb 2017 09:08:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=3c7y+jWzE6/tnwRZv4LAFQzx7LZ+k9DyVu592JwOcn4=; b=J6ZDKqB3UtKkx5jG/G1nd4pQMGxY8BCKdAcnlpdsTsCGliKsLGolep9Fkr0QmFfoDJ eT3ETFYuaouRnehYbHQG0eOzssMRyTLFH95TQCTGZbnLas5b772ScFANI45Eh4zQswYE /TBBvbWh/9VR/iEZCOveSv7i3dSyNjMJf99bK4sQoQgevRrxhY0CP6gxfLYsQKJg+nPe 19WiNrQpY1hETI7+tP4gbXnPgeP6IjrTAVw667fIwrH61N0wNYEOpK1lm8j+CUxJrpWW amR0Tz1xiDEHRR2/9xnz8X1lCXQQoaNC7L7OzDf60/TyHT0mSPnzUkgkfSjSrjrgoSfC i4Hw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=3c7y+jWzE6/tnwRZv4LAFQzx7LZ+k9DyVu592JwOcn4=; b=RnafxUwAa1w1Hkgx6jvoY1aFWz63Kj8+2bboeb5HYfJRXk8UcJzRRvWTeQ1SUOETGT sA8WlK4aFGHSK/ENuE5rlcgMSHvAgWScDYn4te6xT6/mY6i6MGPmHjPAmGR8AsyaCUH9 G9GdvL+QnsctDS1xkAe914r7wihJK2bAX0pNu9Igyg1gTXcdXVF//CEMztqKS81flhmZ HhszNDcmpNVkBRFBDY7YmCbjUHHXx6h7K1DjwORTAAFQW+ES0FF26h6plq6KtxAbaFn0 j9Wz3ND+UXutCrHJvP69+GObFYRH1Ng2beweqMMNlPIbrG5NOW6JRSVzVK0sc8VrJGR4 KjUg== X-Gm-Message-State: AMke39khw7klK2hT7fDu3rFQ16VXuIq2xCsRYhdEEhmWXWO8TLNGp4gK5LFQP8P10vwq6eZASaKMXfF6Dpae4A== X-Received: by 10.55.198.149 with SMTP id s21mr15159447qkl.196.1486141711342; Fri, 03 Feb 2017 09:08:31 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.142.132 with HTTP; Fri, 3 Feb 2017 09:08:31 -0800 (PST) In-Reply-To: References: <1010949359.501064.1485874182374@webmail.strato.de> <6BA19F35-E3BB-48C4-9010-2153908E1DFA@gmail.com> From: Dave Taht Date: Fri, 3 Feb 2017 09:08:31 -0800 Message-ID: To: John Sager Cc: Cake List Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [Cake] conntrack lookup continuation X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Feb 2017 17:08:31 -0000 On Fri, Feb 3, 2017 at 8:42 AM, John Sager wrote: > I would support this. It would allow cake to behave pretty much as I have > HTB+fq_codel currently set up for both egress and ingress (via ifb0) on m= y > border router/firewall. I fwmark egress traffic based on various criteria > using ip[6]tables & transfer the marks to conntrack where they are recove= red > on ingress to classify inbound responses to outbound requests. I'm not huge on using fwmarks. Is this because you cannot re-mark w/dscp consistently via conntrack? > > It would also classify inbound traffic better if cake could use fwmarks i= n > that way as diffserv is currently pretty much useless for that purpose wi= th > most ISPs. My understanding of this is that cake runs before iptables does on inbound. (?) so fw marks won't help here. But it's probable I'm wrong. > John > > On 31/01/17 21:14, chromatix99 at gmail.com (Jonathan Morton) wrote: >>> On 31 Jan, 2017, at 16:49, Felix Resch wrote: >>> >>> Since we now already do the conntrack-lookup for the nat keyword, would= it be >>> expensive to implement a kind of internal conntrack-mark-and-restore by= cake-tin? >>> >>> E.g. when traffic leaves throu canke tin#x, the conntrack entry will ge= t a fwmark and return traffic is put in the corresponding tin/bin on the in= gress cake. >> >> That's an interesting idea. At this point I don't know how easy it is t= o implement, though. >> >> Certainly we need to clean up some other things first. >> >> - Jonathan Morton >> >> > _______________________________________________ > Cake mailing list > Cake@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cake --=20 Dave T=C3=A4ht Let's go make home routers and wifi faster! With better software! http://blog.cerowrt.org