[Cake] sometimes I worry about cobalt's effectiveness

[Jonathan Morton]

>> On 14 Dec, 2021, at 11:59 am, Sebastian Moeller <moeller0 at gmx.de> wrote:
>> 
>> Could we maybe introduce a no-ecn keyword to switch cake to drop only mode? If only to help diagnose ECN issues?
> 
> Inserting a firewall rule *before* Cake to force the ECN field to Not-ECT should suffice for this purpose.

Addendum: either this firewall rule should ignore packets that are already CE-marked, *or* a second firewall rule which *drops* CE-marked packets should be inserted as well.  This avoids erasing congestion information from any upstream AQM.

 - Jonathan Morton