On 3/5/2008 11:00 PM, Ling Deng wrote:
I want to add a priority on the firewall. To prioritize the packets, deep packet inspection is needed, then packets need to be put in different queues depending on the caller and callee numbers.
If you can separate out the calls or mark them somehow, you could use Traffic Control to divide things in to different queues for you. I'd suggest looking at SIP Express Router (presuming you are using SIP) as a local gateway to route the calls. If you can get S.E.R. to either mark the packets of a call or to send them to different destinations (IP and / or port) you could then use TC to prioritize. You just have to help get the traffic split out (de-multiplexed) so that TC can work with it. Presently TC does not (to my knowledge) have any way to identify what calls are what. However I suppose you could get really creative with either the u32 or layer 7 matches and look for specific strings in the packet stream and decide what to do with them that way. If you can get IPTables match extensions to differentiate your calls, you can mark them so that TC can work with them.
Thank you very much,
You are welcome, and good luck. Grant. . . . -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
