Re: tc and iptables trouble

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> LluÃs Gili schrieb:
> > Hi all
> > I have a trouble configuring the qdiscs, when I indicate the "perturb
10" option to tc, i gives me this error:
> >
> > tc qdisc add dev eth0 parent 5:1323 handle 1323 sfq perturb 10
> > RTNETLINK answers: Invalid argument
> >
> > if I don't put the "perturb 10" option, it works.
>
> perturb 10 it's used by default!!!
> nice parent class 5:1323 :o
>

I think that "perturb 0" is used by default (see
http://lartc.org/howto/lartc.qdisc.classless.html#LARTC.SFQ)
anyway, I put any other valor and it don't works :(

> >
> > another question is about iptables, when I indicate the " --set-mark"
option:
> >
> > iptables -t mangle -A egress -s 10.0.0.124 -j MARK --set-mark 1323
> > iptables: Invalid argument
> >
> Egress is a Chain, in this case a user defined chain. It doesnÂt stand
> for the egress used with qdiscs. If you didnÂt use a command like this
> iptables -N egress, there isnÂt a chain like egress.
>
>
>> When you "--set-mark 1323", iptables try to transform it in HEX... give
>> it a lower value, like 132! 1323 in HEX = 52B and I think that it
>> doesn't know how to use 52B as a mark...
>Oh.... sorry, it works ! I put in PREROUTING a MARK 1323 and it was
>transformed OK into 0x52b !
>I think that the problem it's the egress append! Please be more
>specific!

I have this Chain created, I think it is not the problem.
I see this message in syslog:

Nov 25 09:49:04 epia -- MARK --
Nov 25 10:00:05 epia kernel: MARK: targinfosize 4 != 8

I'm installing QOS in a embeded Debian on a Compact Flash, using the
http://gate-bunker.p6.msu.ru/~berk/router.html script. I had to patch and
compile kernel 2.6.9, iptables and iproute in another PC and I used debmake
and debuild for build .deb packets, using the "Multi-binary" option in
"deb-make". Debuild created the .deb files and I can install it tho the
embeded... When I do "dpkg -l" the iproute2 and iptables packets appear like
this:
ii  iproute2                  2.6.9-1                   Missing
ii  iptables                  1.2.11-1                  Missing

Here is all I do:

route add -net 10.0.0.0 netmask 255.255.255.0 gw 172.16.0.1
iptables -t nat -A POSTROUTING -o eth0 -s 10.0.0.0/8 -j SNAT --to
172.16.0.45

tc qdisc add dev eth1 root handle 5: htb default 20
tc class add dev eth1 parent 5: classid 5:1 htb rate 1300kbit burst 15k
iptables -t mangle -N ingress
iptables -t mangle -A POSTROUTING -o eth1 -j ingress

tc qdisc add dev eth0 root handle 5: htb default 20
tc class add dev eth0 parent 5: classid 5:1 htb rate 500kbit burst 15k
iptables -t mangle -N egress
iptables -t mangle -A POSTROUTING -o eth0 -j egress

tc class add dev eth0 parent 5:1 classid 5:1323 htb rate 128kbit ceil
128kbit burst 6k prio 5
tc qdisc add dev eth0 parent 5:1323 handle 1323 sfq perturb 10  #FAILS!
tc filter add dev eth0 parent 5: protocol ip handle 1323 pref 1323 fw
classid 5:1323

tc class add dev eth1 parent 5:1 classid 5:1323 htb rate 256kbit ceil
256kbit burst 6k prio 5
tc qdisc add dev eth1 parent 5:1323 handle 1323 sfq perturb 10 #FAILS!
tc filter add dev eth1 parent 5: protocol ip handle 1323 pref 1323 fw
classid 5:1323

iptables -t mangle -A egress -s 10.0.0.124 -j MARK --set-mark 1323 #FAILS!
iptables -t mangle -A ingress -d 10.0.0.124 -j MARK --set-mark 1323 #FAILS!


>
> _______________________________________________
> LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux