Re: per socket nfmark

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



dean gaudet wrote:
> On Wed, 11 Jul 2007,   wrote:
> 
> 
>> I would like to bring up the question, if there is a way to associate a 
>>nfmark with a socket. It would be very helpful as it saves the matching 
>>against iptables rules which would have to than match the packet and 
>>associate the nfmark.
>>
>>The same question was already posted here:
>>http://lists.netfilter.org/pipermail/netfilter/2002-October/039074.html
> 
> 
> i ended up using IPTOS to do what i wanted... it can't handle nearly as 
> many cases, but i ended up just burning a few extra IP addresses to get 
> all the traffic shaping classes i needed.
> 
> i wrote a mod_iptos for apache so it could set IPTOS appropriately 
> depending on response size, or vhost or whatever.
> 
> http://arctic.org/~dean/mod_iptos/


A clean solution would be to use skb->priority and SO_PRIORITY,
which allows you to specify the TC classes directly. Should be
trivial to change your module to do that.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux