In my firewall, I am using multiple packet marks (around 1000 different marks). For each mark there are around 8-10 fw rules. For each rule, rate control is different. so there are around 10000 or more filter rules (and classes too). To optimize the searching with the filters, I was looking for hashing in filters using fw mark. On Mon, Dec 22, 2014 at 1:43 PM, Remy Mudingay <remy.mudingay@xxxxxxxxx> wrote: > Hi Akshat, > > Out of curiosity what is it you are trying to achieve here - "hash key defined on iptables mark"? > > Remy > >> On 22 Dec 2014, at 07:56, Akshat Kakkar <akshat.1984@xxxxxxxxx> wrote: >> >> Hi Anton! >> >> I got it. Thanks for the reply. >> >> Take Care... >> :) >> >> On Fri, Dec 19, 2014 at 5:08 PM, Anton Danilov >> <littlesmilingcloud@xxxxxxxxx> wrote: >>> Hello. >>> >>> If you mean the u32 classifier, so answer is "no". >>> Cause of this is in what the firewall mark are stored >>> in the skb structure, not in the packet itself. >>> >>> 2014-12-18 11:40 GMT+03:00 Akshat Kakkar <akshat.1984@xxxxxxxxx>: >>>> >>>> In tc filters, can I have hashkey defined on iptables mark? >>>> -- >>>> To unsubscribe from this list: send the line "unsubscribe lartc" in >>>> the body of a message to majordomo@xxxxxxxxxxxxxxx >>>> More majordomo info at http://vger.kernel.org/majordomo-info.html >>> >>> >>> >>> -- >>> Anton. >> -- >> To unsubscribe from this list: send the line "unsubscribe lartc" in >> the body of a message to majordomo@xxxxxxxxxxxxxxx >> More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe lartc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
