kevin at darbyshire-bryant.me.uk
Mon Apr 1 10:07:39 EDT 2019
> On 23 Mar 2019, at 18:35, Kevin Darbyshire-Bryant <kevin at darbyshire-bryant.me.uk> wrote:
>> On 22 Mar 2019, at 21:24, Kevin Darbyshire-Bryant <kevin at darbyshire-bryant.me.uk> wrote:
>> It looks like act_conndscp has been shot down by the kernel people, at least in its current form. Setting a conntrack mark from tc is regarded as “not sure if it is a good idea”. The other way (conntrack to skb) is fine. That’s sort of good news in that ingress is the hard bit as it’s problematic with iptables.
>> egress is within iptables coverage - ‘just’ need a way to store a DSCP & flag to conntrack mark.
> Never give in, never surrender.
Given in. Surrendered.
More information about the Cake