iproute2/tc
shemminger 6d4662d4f7 From: Pablo Neira
Hi jamal,

I found some spare time to play around a bit more with you ipt action stuff.

I've tested the patch attached with the testcase here below. It works
fine here. It fixes broken target option checkings (final_check) and a
leak in the merge_options function. I've killed copy_options since I
didn't find any reason why we need it.

--- test.sh ---
tc qdisc del dev wlan0 ingress
tc qdisc add dev wlan0 ingress
tc filter add dev wlan0 parent ffff: protocol ip prio 6 u32 \
match ip src 192.168.0.2/32 flowid 1:16 \
action ipt -j TOS --set-tos Maximize-Reliability
sleep 3
tc -s filter ls dev wlan0 parent ffff:
--- end of test.sh ---

Results:

tablename: mangle hook: NF_IP_PRE_ROUTING
         target: TOS set Maximize-Reliability  index 0
filter protocol ip pref 6 u32
filter protocol ip pref 6 u32 fh 800: ht divisor 1
filter protocol ip pref 6 u32 fh 800::800 order 2048 key ht 800 bkt 0
flowid 1:16
   match c0a80002/ffffffff at 12
         action order 1: tablename: mangle  hook: NF_IP_PRE_ROUTING
         target TOS set Maximize-Reliability
         index 18 ref 1 bind 1 installed 3 sec used 0 sec
         Action statistics:
         Sent 725 bytes 7 pkt (dropped 0, overlimits 0 requeues 0)
         rate 0bit 0pps backlog 0b 0p requeues 0

Now, check if options passed to the target are correct.

# tc filter add dev wlan0 parent ffff: protocol ip prio 6 u32 \
match ip dst 192.168.0.2/32 flowid 1:16 \
action ipt -j TOS --set-tos
                             ^^^
                         missing parameter

ipt: option `--set-tos' requires an argument
tc-ipt v0.1: TOS target: Parameter --set-tos is required
Try `tc-ipt -h' or 'tc-ipt --help' for more information.

btw, how's your schedule ? did you finally get spare time to come to the
netfilter workshop in seville ?

bye,
Pablo
2005-06-23 17:36:38 +00:00
..
Makefile Add ematch cleanup 2005-06-23 17:23:53 +00:00
README.last (Logical change 1.3) 2004-04-15 20:56:59 +00:00
f_fw.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
f_route.c Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
f_rsvp.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
f_tcindex.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
f_u32.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
m_action.c Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
m_estimator.c Style fix. 2005-03-14 19:02:41 +00:00
m_gact.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
m_ipt.c From: Pablo Neira 2005-06-23 17:36:38 +00:00
m_mirred.c Fix from jamal 2005-03-30 18:43:30 +00:00
m_pedit.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
m_pedit.h Give pedit kind size a name 2005-01-18 00:17:27 +00:00
m_police.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
p_icmp.c Import patch iproute2.121 2005-01-17 23:32:51 +00:00
p_ip.c Import patch iproute2.121 2005-01-17 23:32:51 +00:00
p_tcp.c Import patch iproute2.121 2005-01-17 23:32:51 +00:00
p_udp.c Import patch iproute2.121 2005-01-17 23:32:51 +00:00
q_atm.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
q_cbq.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
q_dsmark.c Use NLMSG_TAIL 2005-01-18 01:24:18 +00:00
q_fifo.c : prevent tc crashes 2004-09-28 18:35:49 +00:00
q_gred.c more ifdef excession. 2005-03-10 20:26:08 +00:00
q_hfsc.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
q_htb.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
q_ingress.c : prevent tc crashes 2004-09-28 18:35:49 +00:00
q_netem.c Netem support for reorder 2005-06-22 18:27:49 +00:00
q_prio.c : prevent tc crashes 2004-09-28 18:35:49 +00:00
q_red.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
q_sfq.c : prevent tc crashes 2004-09-28 18:35:49 +00:00
q_tbf.c Use parse_rtattr_nested 2005-01-18 22:11:58 +00:00
tc.c Fix off-by-one while generating argument vector 2005-06-23 17:32:22 +00:00
tc_cbq.c (Logical change 1.3) 2004-04-15 20:56:59 +00:00
tc_cbq.h (Logical change 1.3) 2004-04-15 20:56:59 +00:00
tc_class.c Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
tc_common.h Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
tc_core.c Adds mpu support to HTB (ATM) queueing discipline 2004-07-30 20:26:15 +00:00
tc_core.h Import patch iproute-batch.1.050209.patch 2005-03-14 19:02:41 +00:00
tc_estimator.c (Logical change 1.3) 2004-04-15 20:56:59 +00:00
tc_filter.c Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
tc_qdisc.c Fix batch mode handle usage. 2005-03-14 22:19:16 +00:00
tc_red.c (Logical change 1.3) 2004-04-15 20:56:59 +00:00
tc_red.h (Logical change 1.3) 2004-04-15 20:56:59 +00:00
tc_util.c Import patch iproute2-hz 2005-03-14 18:44:54 +00:00
tc_util.h iproute2: gnet_stats 2004-12-07 23:52:52 +00:00

README.last

Kernel code and interface.
--------------------------

* Compile time switches

There is only one, but very important, compile time switch.
It is not settable by "make config", but should be selected
manually and after a bit of thinking in <include/net/pkt_sched.h>

PSCHED_CLOCK_SOURCE can take three values:

	PSCHED_GETTIMEOFDAY
	PSCHED_JIFFIES
	PSCHED_CPU


 PSCHED_GETTIMEOFDAY

Default setting is the most conservative PSCHED_GETTIMEOFDAY.
It is very slow both because of weird slowness of do_gettimeofday()
and because it forces code to use unnatural "timeval" format,
where microseconds and seconds fields are separate.
Besides that, it will misbehave, when delays exceed 2 seconds
(f.e. very slow links or classes bounded to small slice of bandwidth)
To resume: as only you will get it working, select correct clock
source and forget about PSCHED_GETTIMEOFDAY forever.


 PSCHED_JIFFIES

Clock is derived from jiffies. On architectures with HZ=100
granularity of this clock is not enough to make reasonable
bindings to real time. However, taking into account Linux
architecture problems, which force us to use artificial
integrated clock in any case, this switch is not so bad
for schduling even on high speed networks, though policing
is not reliable.


 PSCHED_CPU

It is available only for alpha and pentiums with correct
CPU timestamp. It is the fastest way, use it when it is available,
but remember: not all pentiums have this facility, and
a lot of them have clock, broken by APM etc. etc.