tc filter fw flowid and masks

tc filter fw flowid and masks

[Salatiel Filho]

Hi guys, when i mark a packet using, for example,
# iptables ...  -j MARK --set-mark 10
i can match it using
#tc filter add dev ... handle 10 fw flowid 1:10

But how can i match it using tc filter if the mark using iptables has a mask?
# iptables ... -j MARK --set-mark 10/0xff

The mark is needed because there are a few QOS scripts that set marks
using masks 0xff00.

When using maks i am always getting in to the default tc class.

Thanks!

[]'s
Salatiel

Re: tc filter fw flowid and masks

[Marco Gaiarin]

Mandi! Salatiel Filho
  In chel di` si favelave...

> But how can i match it using tc filter if the mark using iptables has a mask?

You have to use u32:

	$TC filter add dev $IFACE parent 1:0 protocol ip prio $l \
		u32 match mark $l $MASK flowid 1:$LVLH

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
    http://www.lanostrafamiglia.it/25/index.php/component/k2/item/123
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

Re: tc filter fw flowid and masks

[Andy Furniss]

Salatiel Filho wrote:
> Hi guys, when i mark a packet using, for example,
> # iptables ...  -j MARK --set-mark 10
> i can match it using
> #tc filter add dev ... handle 10 fw flowid 1:10
>
> But how can i match it using tc filter if the mark using iptables has a mask?
> # iptables ... -j MARK --set-mark 10/0xff
>
> The mark is needed because there are a few QOS scripts that set marks
> using masks 0xff00.
>
> When using maks i am always getting in to the default tc class.

Maybe you need to put 0x everywhere you can.

Like Marco I would have said use u32 mark match, but I
have seen router setups that seem to use fw with masks.

untested but maybe something like -

iptables ... -j MARK --set-mark 0x10/0xff

tc filter add dev ... handle 0x10/0xff fw flowid 1:10

Re: tc filter fw flowid and masks

[Phil Sutter]

Hi,

On Tue, Mar 28, 2017 at 04:19:48AM -0300, Salatiel Filho wrote:
> Hi guys, when i mark a packet using, for example,
> # iptables ...  -j MARK --set-mark 10
> i can match it using
> #tc filter add dev ... handle 10 fw flowid 1:10
> 
> But how can i match it using tc filter if the mark using iptables has a mask?
> # iptables ... -j MARK --set-mark 10/0xff

f_fw.c supports handles in form of val/mask, see

| tc filter add fw help

So it should be possible to match the packets like this:

| tc filter add dev ... handle 10/0xff fw flowid 1:10

Cheers, Phil

Re: tc filter fw flowid and masks

[Marco Gaiarin]

Mandi! Phil Sutter
  In chel di` si favelave...

> f_fw.c supports handles in form of val/mask, see
> | tc filter add fw help

...by what version? On debian jessie:

 root@tank:~# tc filter add fw help
 Usage: ... fw [ classid CLASSID ] [ police POLICE_SPEC ]
        POLICE_SPEC := ... look at TBF
        CLASSID := X:Y
 
 NOTE: CLASSID is parsed as hexadecimal input.

 root@tank:~# tc -V
 tc utility, iproute2-ss140804
 root@tank:~# uname -a
 Linux tank 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64 GNU/Linux

So seems not.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
    http://www.lanostrafamiglia.it/25/index.php/component/k2/item/123
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

Re: tc filter fw flowid and masks

[Phil Sutter]

On Wed, Mar 29, 2017 at 06:13:01PM +0200, Marco Gaiarin wrote:
> Mandi! Phil Sutter
>   In chel di` si favelave...
> 
> > f_fw.c supports handles in form of val/mask, see
> > | tc filter add fw help
> 
> ...by what version? On debian jessie:
> 
>  root@tank:~# tc filter add fw help
>  Usage: ... fw [ classid CLASSID ] [ police POLICE_SPEC ]
>         POLICE_SPEC := ... look at TBF
>         CLASSID := X:Y
>  
>  NOTE: CLASSID is parsed as hexadecimal input.
> 
>  root@tank:~# tc -V
>  tc utility, iproute2-ss140804
>  root@tank:~# uname -a
>  Linux tank 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64 GNU/Linux
> 
> So seems not.

Since v4.9.0.