> Looks right for the Squid part. > > Also check that Squid was built with the netfilter-conntrack library and > the QoS feature enabled. > --enable-zph-qos --with-netfilter-conntrack > > when not explicitly specified for ./configure the feature support is at > the mercy of the automatics and may be disabled relatively silently if > required system pieces are missing. > iptables should have something to track packet markings with. I've recompiled squid with the missed options, and in the iptables logs I can see the packets are marked. For information, if someone want to know how verify if the packets are marked : iptables -A OUTPUT -j LOG iptables -A INPUT -j LOG iptables -A FORWARD -j LOG cat /var/log/kern.log So, the problem comes from tc, not squid. > I'm not familiar with the specific tc configuration to help further sorry. Do you know someone who managed to use the squid marked packets to make a QoS based on ip source with classful queuing ? (cbq, htb) Or do you know where I can ask help ? It seems the LARTC mailing-list is dead. Thanks, Grégoire Leroy