From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com [IPv6:2607:f8b0:400c:c05::232]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 7745221F751 for ; Thu, 10 Dec 2015 04:22:01 -0800 (PST) Received: by vkca188 with SMTP id a188so79779061vkc.0 for ; Thu, 10 Dec 2015 04:22:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=oYzlILBiYxrHwN/dmbuXd2HjEz2a2KOWVeC/WSqR3y0=; b=GrlBSn/exNhU3hHLh6xMpg1435ps+NXHi1+5nE3Zwm3BMfO9OKb3lgNnXmwBYzSGyj O8mTOKdVgJyVR9r7iGIT5IMt4z1HQYVBo26EXOo+RxCTmmYzwa5u0tJWyI5tRXEUiRkg vOIYdM7gfxxTtqOLfvkzeec73m6tjZ6q04/NhVACqzk891QQlQnozSjE5eOD1LYfnJmr 1zHcvNZ58SR5eN82Xe7dnIrdMMbMiXJ52Yd86xKdjCOtL0LM4jBL4uh11EPSqokrF4cr sHrEiHpX4/5IfjpVVtRin43TnKEhvUbT3AIo/lwUMz0VvQKSwwnCAPhejgqMpgxB/94O T6xA== MIME-Version: 1.0 X-Received: by 10.13.212.16 with SMTP id w16mr4159989ywd.99.1449750120196; Thu, 10 Dec 2015 04:22:00 -0800 (PST) Received: by 10.37.112.6 with HTTP; Thu, 10 Dec 2015 04:22:00 -0800 (PST) In-Reply-To: <56696B65.4040608@darbyshire-bryant.me.uk> References: <5664173D.40808@darbyshire-bryant.me.uk> <56695F78.5020802@darbyshire-bryant.me.uk> <56696B65.4040608@darbyshire-bryant.me.uk> Date: Thu, 10 Dec 2015 13:22:00 +0100 Message-ID: From: Dave Taht To: Kevin Darbyshire-Bryant Content-Type: text/plain; charset=UTF-8 Cc: cake@lists.bufferbloat.net Subject: Re: [Cake] dscp & tunneling X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 12:22:45 -0000 On Thu, Dec 10, 2015 at 1:09 PM, Kevin Darbyshire-Bryant wrote: > the same test shows all those flows going in the best effort tin and > nothing being split out according to dscp. Things are split out > correctly with ipv4. Assuming that my installation of flent is doing > the right thing (putting dscp on its outbound ipv6 packets) and knowing > that both flent & cake handle the ipv4 version of the test correctly and > that by the time 'cake' sees my tunnel it's all ipv4 outer packets > anyway, this suggests dscp from inner ipv6 to outer ipv4 isn't taking > place, at least for 6in4 'sit' tunnels :-( Wireshark is your friend here. It would not surprise me if dscp inherit had broken again, or, it was borked on decapsulation. Not a widely tested feature, that. I remember making it work several years ago, remember sort of seeing the patches go upstream somewhere.... it was a long time ago. > > >> >> VPNs like ipsec or openvpn are not handled this way, not enough data. >> Arguably you could pull apart some forms of tinc (stalled out research >> project) in a really sane way... > >