[Cake] Using firewall connmarks as tin selectors

gamanakis at gmail.com gamanakis at gmail.com
Wed Feb 27 22:24:45 EST 2019


I think it's much simpler to use than tc-filter, BPF or even DSCP bits.
Manipulating DSCP bits seems the simplest of the currently available mechanisms to classify traffic. Even in this case, fwmarks are essentially simpler.
E.g. if you want to classify outgoing traffic on the LAN interface:
with DSCP you need to manipulate DSCP bits on incoming packets on the WAN interface. 
with fwmark you can directly mark outgoing packets on the LAN interface and cake will classify them appropriately.




More information about the Cake mailing list