Displaying 20 results from an estimated 5000 matches similar to: "MARK vs CLASSIFY with tc"
2005 Apr 04
8
Help please with tc and iptables mark
Hello list members,
Finaly I''m here after a week of trying to subscribe to this list... pfew...
Anyway... I have a rather strange problem with tc. I am trying to police the
ingress traffic into my network using the iptables MARK feature (in mangle
table, PREROUTING) but it seems that tc filters ignore this marks and they
don''t work at all for me. Let me explain a bit more in
2004 May 22
6
MARK causes high CPU usage / using tc in conjunction with MASQ
Using below configuration multiplied by 3000+ nodes to control bandwidth
causes very high kernel cpu usage (99.5%) narrowed it down to the mangle
table. Any ideas to do this more efficiently would be appreciated.
The mangle table entry (indicated by ***) is sucking all the cpu. I am
running RH7.3 kernel 2.4.18-3 and iptables 1.2.5
This setup has worked well for more than 1000 devices but as the
2017 Mar 10
4
[Bug 1128] New: ip6_tables connmark or connlabel never matches
https://bugzilla.netfilter.org/show_bug.cgi?id=1128
Bug ID: 1128
Summary: ip6_tables connmark or connlabel never matches
Product: netfilter/iptables
Version: unspecified
Hardware: x86_64
OS: SuSE Linux
Status: NEW
Severity: normal
Priority: P5
Component: ip6_tables (kernel)
2006 May 19
25
iptables CLASSIFY and MARK not working?
I have to match my packets based on MAC address, which I cannot do in
the POSTROUTING chain, so I do it in PREROUTING using MARK. Then, I
match on the MARK in the POSTROUTING chain to do a CLASSIFY. But this
does not seem to work:
wireless-r1 bwlimit # iptables -L -v -n -t mangle
Chain PREROUTING (policy ACCEPT 3353K packets, 941M bytes)
pkts bytes target prot opt in out source
2006 Jun 02
2
Bi-directional packet classification with ACK prioritization
Sorry for making this a cross-post, but the pressure is on for getting
this bandwidth shaper working.
I have an interesting dilemma with bi-directional packet classification
while doing ACK prioritization. This is an overly simplified summary of
my setup:
Internet
|
Eth0
|
Router
|
Eth1
|
Intranet
A client on the Intranet establishes a flow to a server on the Internet.
Packets get
2005 Jul 06
8
HTB and bittorrent, won''t work
Hello,
I''ve been trying to shape the bittorrent traffic (on my external interface,
upload), but without luck, for this I''m using layer7 filter right now, but
I''ve also tried ipp2p, with the same results, I might say that this is not a
problem with this packet classifiers, the problem is with HTB, here''s why.
When I open azureus (the bittorrent client I
2011 Apr 24
1
Logging specific Classified packets
Hi All,
I''m not convinced I have my tcrules correctly setup and looking at the
counters in the mangle table''s tcpost doesn''t really help much as I can''t
tell what is the final match.
Is there a way to match packets in iptables based on the classifier? i.e.
so I can LOG packets classified with 1:18 for example.
I can''t see anything in iptables, except
2006 May 05
3
iptables CLASSIFY vs fwmark?
Could someone comment on the benefits of using CLASSIFY vs fwmark (or
vice versa) in iptables?
I''m getting ready to implement some basic tc for VoIP and most of the
examples seem to use the (older?) fwmark syntax. Should I convert these
to CLASSIFY? Can the two syntaxes be mixed? Also with U32?
TIA,
Edwin
--
<=+=+=+==+=+=+==+=+=+=+=+=+=+=+=>
Edwin Whitelaw, P.E.
New River
2005 Aug 08
7
Loadbalancing and failover using TC and Iptables
Hi all
iam trying to deploy loadbalance and failover
My setup description
--Fedora Core 4
--Linux 2.6.12.3 #1 SMP Mon Jul 25 22:37:34 IST 2005 i686 i686 i386
GNU/Linux
--tc utility, iproute2-ss050314
--ip utility, iproute2-ss050314
--iptables v1.3.0
And i had deployed Following configuration
#table main with priority 50, the highest one
ip rule add prio 50 table main
#table 201
ip rule add
2004 Dec 24
4
Ingress and Classifier & netfilter
Hi all,
Whenever I start up TC and implement traffic policing using ingress, I
get logs that goes something like this:
Classifier actions preferred over ingress.
What does that mean??
This are the relevent lines :
tc qdisc add dev $DEV handle ffff: ingress
tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src
0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
2004 May 12
9
Bandwith thinking error
Hi,
I found that I had some thinking error with the wshaper script. I assigned
the bandwith of my DSL connection to it, but the machine where it runs is
normally connected to the LAN with 100Mbit behind a separate
Hardware-Router.Obviously, the complete connection of the machine was slowed down to 384k
because I told it so.I guess, since wshaper takes only one card as argument, I can''t
2006 Feb 06
2
p2p marking, again
Hey, one more question for ipp2p
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK
--restore-mark
iptables -t mangle -A DSL-IN -p tcp -m mark ! --mark 0 -j ACCEPT
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j MARK --set-mark 7
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --save-mark
iptables -t mangle -A DSL-IN -p udp -m ipp2p --ipp2p -j MARK
2005 Dec 05
1
Connmark question
I am trying to get IPP2P working on my router. Thus far I can see
connections being marked (see below), but they don''t seem to get saved
or something. When looking at /proc/net/ip_conntrack, nothing has
anything other than 0 for mark. The iptables commands for this are:
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark
iptables -t mangle -A PREROUTING -m mark ! --mark 0 -j
2013 Aug 27
0
[Bug 657] New feature request: classify match, similar to matching on mark.
https://bugzilla.netfilter.org/show_bug.cgi?id=657
Phil Oester <netfilter at linuxace.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |netfilter at linuxace.com
AssignedTo|jengelh at medozas.de |netfilter-buglog at lists.netf
2020 Jun 30
0
[Bug 657] New feature request: classify match, similar to matching on mark.
https://bugzilla.netfilter.org/show_bug.cgi?id=657
Jiri <jiri at samohyb.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jiri at samohyb.com
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part
2006 Jan 30
3
u32 match versus iptables CLASSIFY target - performance
hello,
i have a question:
- which one is faster: "tc filter with u32 match per dst ip" or "iptables
match per dst ip with target CLASSIFY"?
- this question is for large rulesets (over 500)
thank you,
cristian carstea
2004 Mar 29
6
bridging shaper
Hello,
I have a transparent bridge/firewall setup using linux-2.6.3. My iptables
commands for the firewall seem to work fine, but my tc traffic shaper
rules dont. The tc rules seem to apply ok, but have no effect.
Here are my tc rules. Basically im just trying to limit each IP in my
internal /24 to 512k of bandwidth in and out.
DEV=eth0
tc qdisc del dev $DEV root
tc qdisc add dev $DEV
2007 May 09
10
Load balancing using connmark
Hi,
I''ve been implementing a load balancing solution using CONNMARK, based
on solution described by Luciano Ruete at [1]. Gracias por el post y por
apuntar en la dirección correcta Luciano!
Once implemented, I''ve found that due to some reason packets aren''t
properly marked (or improperly remarked) and sent out using the wrong
interface.
My topo setup is:
2006 Jun 20
2
about fw classifier
Hi all!
On http://lartc.org/howto/lartc.adv-filter.html I read that a classifiers
available bases the decision on how the firewall has marked the packet and on
http://lartc.org/howto/lartc.qdisc.filters.html the following example:
"tc filter add dev eth1 protocol ip parent 1:0 prio 1 handle 6 fw flowid 1:1"
"iptables -A PREROUTING -t mangle -i eth0 -j MARK --set-mark 6"
My
2006 Feb 02
1
marking and limiting P2P packets
Hello, I am trying to shape p2p trafik to 256kbps on my dsl line. I wrote
this set of commands:
DEV=eth2
ip link set imq0 up
tc qdisc add dev imq0 root handle 1:0 htb default 21 r2q 2
tc class add dev imq0 parent 1:0 classid 1:1 htb rate 530kbit
tc class add dev imq0 parent 1:1 classid 1:20 htb rate 530kbit ceil 530kbit
prio 0
tc class add dev imq0 parent 1:1 classid 1:21 htb rate 64kbit