From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pl1-x642.google.com (mail-pl1-x642.google.com [IPv6:2607:f8b0:4864:20::642]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 2D7B83B29E for ; Mon, 1 Apr 2019 19:52:38 -0400 (EDT) Received: by mail-pl1-x642.google.com with SMTP id g37so5271412plb.5 for ; Mon, 01 Apr 2019 16:52:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mounce.com.au; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=52WzZxNX67TI4qphKQKE7m3MKjLpvpvmWMT4BxOt0gE=; b=dVoNEgZL1kkH5wTOUjOrVZHiBTtBi4+6zZZ3Gw1PuJRFYJWyXIHGEU+lBCmkmmsziq DvaG/65oGf6UXLWDa2rcAVVjnevcRSa06eK4YSP6xCJVPHlPzZ1ZIh4v9t9f4e06oSwM gfp8tsE6+LMtn85g9LU7D+rhfYGsFw80PAQORgISLrgF48W1C4SYjolJs/vwtzoVpiCv TFcJysrAVTvn1jITdZi+v6mdqKpUo5c/g/OG8qgekuY9U+w6qj5loqYK6cvuKOF4vPX/ B4LbBhWCnik/YBjOJqGpR8o90PvJoeXjocvsCgDiVH/Qyy74zwMsvtEnD+JUFtTad5VS KFcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=52WzZxNX67TI4qphKQKE7m3MKjLpvpvmWMT4BxOt0gE=; b=BQvOikx6/EAw1JAhJAGhM2GfJN6meimqFeKlphLub1ABZ/8flDeVIf/koW5xctmYRe JS7BxzGad5wZCYfwhUH1qQvRINBUv5pI5BE1kxIjmNxP8rH33y+xdLpTZXEfAtAGBhz6 QBec29tPmuP1Gt1y650BcoMitjhZTOGxqjAStHkdNB0kzPaAAaqyEFnjqQnbb/iF3YXk 2hB1DGY3tII0KWkLucDAMKNsnN0D3UAAKJ69NAcDmA/uYe92tcNOBgIjgeDAK5xo9ny6 pfPInY8O8yLrCKI6tCE0n+UfHBNFiKGtwaUUwxVDOYLfcw9FkKFD26ZRLAqJZLfdkip7 7hNQ== X-Gm-Message-State: APjAAAWSTpjT8rv+gVI2llGGS+xCxtgNeMZItiGkLDzUfpzcRjGMbNEh s77jCr9HSmWkfHxMt1mepqNbTqrXx88aVqtEZvYBiQ== X-Google-Smtp-Source: APXvYqygviz39sc08cIq7jm6mxdwI8u8A+zS9YIcWJepJMglaIaj41iB49ga5kYEzBy8jm/pV5iqT8kNDLwbgU9dzpI= X-Received: by 2002:a17:902:2bc9:: with SMTP id l67mr66805756plb.102.1554162757293; Mon, 01 Apr 2019 16:52:37 -0700 (PDT) MIME-Version: 1.0 References: <7E711BD9-DE6A-4385-8A55-401812D998E8@gmx.de> <7331132F-F80A-4903-8CD0-48946CFE38FD@darbyshire-bryant.me.uk> <263A35BC-A25C-4CC0-9E75-99A7FAF33D36@gmx.de> <380EDD79-EC7A-4D43-8BF5-CA2E8366FE59@darbyshire-bryant.me.uk> In-Reply-To: <380EDD79-EC7A-4D43-8BF5-CA2E8366FE59@darbyshire-bryant.me.uk> From: Ryan Mounce Date: Tue, 2 Apr 2019 10:22:26 +1030 Message-ID: To: Kevin Darbyshire-Bryant Cc: Sebastian Moeller , "cake@lists.bufferbloat.net" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [Cake] act_conndscp X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Apr 2019 23:52:38 -0000 On Tue, 2 Apr 2019 at 00:37, Kevin Darbyshire-Bryant wrote: > > > > > On 23 Mar 2019, at 18:35, Kevin Darbyshire-Bryant wrote: > > > > > > > >> On 22 Mar 2019, at 21:24, Kevin Darbyshire-Bryant wrote: > >> > >> It looks like act_conndscp has been shot down by the kernel people, at= least in its current form. Setting a conntrack mark from tc is regarded a= s =E2=80=9Cnot sure if it is a good idea=E2=80=9D. The other way (conntrac= k to skb) is fine. That=E2=80=99s sort of good news in that ingress is the= hard bit as it=E2=80=99s problematic with iptables. > >> > >> egress is within iptables coverage - =E2=80=98just=E2=80=99 need a way= to store a DSCP & flag to conntrack mark. > > > > Never give in, never surrender. > > > > Given in. Surrendered. :( FWIW I've applied an updated patch with your iptables 'abomination' and it's been working without issue.