---------- Forwarded message ---------- From: Dave Taht <dave.taht@xxxxxxxxx> Date: Wed, Jun 8, 2011 at 9:47 AM Subject: Re: [RFC] ecn match ported to ipv6 To: Eric Dumazet <eric.dumazet@xxxxxxxxx> Cc: Patrick McHardy <kaber@xxxxxxxxx>, Jan Engelhardt <jengelh@xxxxxxxxxx>, Netfilter Development Mailinglist <netfilter-devel@xxxxxxxxxxxxxxx> On Wed, Jun 8, 2011 at 9:01 AM, Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > > Dave Taht mentioned in bloat list that netfilter ecn match was ipv4 > only. > > Is there any plan to make the switch from net/ipv4/netfilter/ipt_ecn.c > to net/netfilter/xt_ecn.c ? > > I can probably do it but not before ~ten days, so if someone is > interested, this will please Dave ;) The larger question I had was this "iptables seems to think ecn can only be looked at in TCP streams, where (for example), ecn bits can be copied to the outer header of a udp vpn stream, and marked when needed." ECN is an ip level standard, not just a tcp one. http://www.ietf.org/rfc/rfc3168.txt Example of ECN on ipsec: http://huchra.bufferbloat.net/~d/veryhappynetwork.png Also ECN marking in various qdiscs like HTB as presently being discussed on the bloat list https://lists.bufferbloat.net/pipermail/bloat/2011-June/000555.html and a truly crazy idea regarding combining DSCP with firewalling is here: https://lists.bufferbloat.net/pipermail/bloat/2011-June/000558.html To give some context as to what we've been up to regarding bufferbloat, I have a test lab setup with a bunch of wndr3700v2 routers at georgia tech, and have pushed every ecn and bufferbloat related patch in linux head into the openwrt distro, and am playing with all sorts of techniques now, with increasingly good results. The 'uberwrt' project is in addition to the debloat-testing work and has various subprojects... mostly targeting the wndr3700v2 and nanostation M5 as these have a completely open source wireless and wired stack. http://www.bufferbloat.net/projects/uberwrt/wiki -- Dave Täht SKYPE: davetaht US Tel: 1-239-829-5608 http://www.bufferbloat.net -- Dave Täht SKYPE: davetaht US Tel: 1-239-829-5608 http://the-edge.blogspot.com -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
