Fred Maillou
2012-Feb-27 15:38 UTC
New DSCP field (re: Adding iptable rules for DSCP marking)
Hello, Will this DSCP feature be able to actually mark DSCP, as per the original poster use-case description ? Fred. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
Tom Eastep
2012-Feb-27 16:56 UTC
Re: New DSCP field (re: Adding iptable rules for DSCP marking)
On Feb 27, 2012, at 7:38 AM, Fred Maillou wrote:> Hello, > > Will this DSCP feature be able to actually mark DSCP, as per > the original poster use-case description ?Yes, -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
Fred Maillou
2012-Feb-27 17:15 UTC
Re : New DSCP field (re: Adding iptable rules for DSCP marking)
________________________________ De : Tom Eastep <teastep@shorewall.net> À : Fred Maillou <frederriffic@yahoo.ca>; Shorewall Users <shorewall-users@lists.sourceforge.net> Envoyé le : lundi 27 février 2012 11h56 Objet : Re: [Shorewall-users] New DSCP field (re: Adding iptable rules for DSCP marking) On Feb 27, 2012, at 7:38 AM, Fred Maillou wrote: Hello,> > Will this DSCP feature be able to actually mark DSCP, as per > the original poster use-case description ? > > Yes.The current 4.5.1 BETA2 tcrules documentation (eg. tcrules annotated) mentions *matching* on DSCP values. Is this where the marking of DSCP values for egress purposes is also done ? As an example, for a packet that matches a tcrule but *has no DSCP value*, would putting a DSCP value in the new tcrules DSCP field *mark the packet for egress* so that other machines elsewhere on the network can read that added value ? Thanks for any clarification as I''m a bit puzzled at the moment. Fred. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
Tom Eastep
2012-Feb-27 20:40 UTC
Re: Re : New DSCP field (re: Adding iptable rules for DSCP marking)
On 02/27/2012 09:15 AM, Fred Maillou wrote:> > > ------------------------------------------------------------------------ > *De :* Tom Eastep <teastep@shorewall.net> > *À :* Fred Maillou <frederriffic@yahoo.ca>; Shorewall Users > <shorewall-users@lists.sourceforge.net> > *Envoyé le :* lundi 27 février 2012 11h56 > *Objet :* Re: [Shorewall-users] New DSCP field (re: Adding iptable rules > for DSCP marking) > > > On Feb 27, 2012, at 7:38 AM, Fred Maillou wrote: > >> Hello, >> >> Will this DSCP feature be able to actually mark DSCP, as per >> the original poster use-case description ? > >> Yes. > > The current 4.5.1 BETA2 tcrules documentation (eg. tcrules annotated) > mentions *matching* on DSCP values. Is this where the marking of DSCP > values for egress purposes is also done ? As an example, for a packet > that matches a tcrule but *has no DSCP value*, would putting a DSCP > value in the new tcrules DSCP field *mark the packet for egress* so that > other machines elsewhere on the network can read that added value ? > Thanks for any clarification as I''m a bit puzzled at the moment.Search the manpage for ''DSCP'' -- you can also specify that in the MARK/CLASSIFY column to set the DSCP value. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
Fred Maillou
2012-Feb-27 21:18 UTC
Re : Re : New DSCP field (re: Adding iptable rules for DSCP marking)
> Search the manpage for ''DSCP'' -- you can also specify that in > the MARK/CLASSIFY column to set the DSCP value.Thanks. Is it then possible to MARK/CLASSIFY (for a tcclass) and at the same time apply a DSCP mark for egress ? Would it need two tcrules with the same matching parameters, one to mark for tcclass and one for the DSCP mark ? Thanks again for your comments. Fred. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
Tom Eastep
2012-Feb-27 21:56 UTC
Re: Re : Re : New DSCP field (re: Adding iptable rules for DSCP marking)
On 02/27/2012 01:18 PM, Fred Maillou wrote:>> Search the manpage for ''DSCP'' -- you can also specify that in >> the MARK/CLASSIFY column to set the DSCP value. > > Thanks. Is it then possible to MARK/CLASSIFY (for a tcclass) and > at the same time apply a DSCP mark for egress ? Would it need > two tcrules with the same matching parameters, one to mark for > tcclass and one for the DSCP mark ? Thanks again for your > comments.You need two rules. But they might not have the same predicates. Suppose that for any given differentiated service class, you always use the same TC class. Then your first rule sets the class based on protocol,ports,etc. and the second rule selects the TC class based on the contents of the DSCP field. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2