Hi,
i am fighting with qos.
there are five GRE interfaces, each over its own IPsec tunnel.
on each interface there is a qdisc with four classes.
the packets get marked with iptables.
but it looks like the packet doesn't get assigned to the classes.
tc -s class ls dev mi2ro shows only traffic for the default queue 6:5
tc qdisc del dev mi2ro root
tc qdisc add dev mi2ro root handle 6:0 htb default 5
tc class add dev mi2ro parent 6:0 classid 6:1 htb rate 3mbit ceil 5mbit
tc class add dev mi2ro parent 6:1 classid 6:2 htb rate 2000kbit ceil
2500kbit prio 1
tc class add dev mi2ro parent 6:1 classid 6:3 htb rate 256kbit ceil
512kbit prio 2
tc class add dev mi2ro parent 6:1 classid 6:4 htb rate 256kbit ceil
256kbit prio 2
tc class add dev mi2ro parent 6:1 classid 6:5 htb rate 128kbit ceil
1500kbit prio 7
tc filter add dev mi2ro parent 6: prio 1 protocol ip handle 2 fw flowid 6:2
tc filter add dev mi2ro parent 6: prio 2 protocol ip handle 3 fw flowid 6:3
tc filter add dev mi2ro parent 6: prio 2 protocol ip handle 4 fw flowid 6:4
here are my packet filter rules:
iptables -L FORWARD -n -v -t mangle
Chain FORWARD (policy ACCEPT 31M packets, 7987M bytes)
pkts bytes target prot opt in out source destination
1175K 234M MARK all -- * * 0.0.0.0/0
0.0.0.0/0 DSCP match 0x2e/* mark VoiceData, 20120323ts */ MARK
set 0x2
1205K 49M MARK tcp -- * * 0.0.0.0/0
192.2.1.30 tcp dpt:23 /* mark outgouing telnet, 20120323ts */
MARK set 0x3
5151K 216M MARK all -- * * 0.0.0.0/0
192.2.1.41 /* markieren outging NX, 20120323ts */ MARK set 0x4
13M 1102M MARK all -- * * 192.6.1.0/24
0.0.0.0/0 /* markiere rest of outTraffic, 20120323ts */ MARK
set 0x5
1001K 258M MARK tcp -- * * 192.2.1.30
0.0.0.0/0 tcp spt:23 /* mark incoming telnet, 20120323ts */
MARK set 0x6
9115K 503M MARK all -- * * 192.2.1.41
0.0.0.0/0 /* mark incoming NX-Traffic, 20120323ts */ MARK set 0x7
18M 6885M MARK all -- * * 0.0.0.0/0
192.6.1.0/24 /* mark rest incoming Traffic, 20120323ts */ MARK
set 0x8
when checking the interface
there are filters i didn't enter?
tc filter ls dev mi2ro
filter parent 6: protocol ip pref 1 fw <--this one??
filter parent 6: protocol ip pref 1 fw handle 0x2 classid 6:2
filter parent 6: protocol ip pref 2 fw <--this one??
filter parent 6: protocol ip pref 2 fw handle 0x3 classid 6:3
filter parent 6: protocol ip pref 2 fw handle 0x4 classid 6:4
how can i remove this filter?
best regards
thomas
--
To unsubscribe from this list: send the line "unsubscribe lartc" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
