Re: Squid marking QOS and matching marks with linux iptables problem !

[Ahmad Alzaeem <0xff1f@xxxxxxxxx>]

Tested on both OS below :

Centos 7.7  64 bits  & Centos 6.10

Same result , squid is not marking traffic .

Is there a way to run squid into debug mode and debug to see if its making DSCP or not ?

Thanks 

On May 24, 2020, at 3:15 AM, Eliezer Croitoru <ngtech1ltd@xxxxxxxxx> wrote:

What OS?

 

Sent from Mail for Windows 10

 

From: Ahmad Alzaeem
Sent: Saturday, May 23, 2020 11:40 PM
To: Squid Users
Subject: Re: Squid marking QOS and matching marks with linux iptables problem !

 

Hello Folks , any one in the mailing list can help me on the case ?

 

Thanks 

 

 

> On May 21, 2020, at 3:03 AM, Ahmad Alzaeem <0xff1f@xxxxxxxxx> wrote:

> 

> Hello Folks ,

> 

> Im trying to mark outgoing squid request based on Mark linux matching .

> 

> I added to squid conf :

> 

> qos_flows mark local-hit=0xd7

> qos_flows mark local-miss=0xd7

> 

> -A OUTPUT -m mark --mark 0xd7 -j ACCEPT

> 

> But on iptables there is no match with the mark 0xd7 

> 

> 

> Im testing  marking with squid and matching with iptables  but its not matching , always statistics = 0 on linux iptables  That mean  its not matched .

> 

> Squid version is 4.8

> Also squid was complied with '--enable-zph-qos’ flag 

> 

> So not sure if I need specific config for squid .

> 

> Following :

> 

> https://wiki.squid-cache.org/Features/QualityOfService

> 

> Based on it we need kernel patch for TOS , but I dont need TOS ,  I just need Layer 3 DSP , Linux mark rule based .

> 

> 

> i even tried to match traffic by mark and connmark and both did not help .

> 

> -A OUTPUT -m mark --mark 0xd7 -j ACCEPT

> -A OUTPUT -m connmark --mark 0xd4 -j ACCEPT

> 

> 

> So both rules above was not able to pickup squid marking .

> 

> Any helping Team on this case ?

> 

> 

> Thank you

 

_______________________________________________

squid-users mailing list

squid-users@xxxxxxxxxxxxxxxxxxxxx

http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users