[LARTC] action redirect and dummy interface

[LARTC] action redirect and dummy interface

[Paweł Staszewski]

Hello i have some problems on 2.6.14 kernel dummy and iproute :)

i have server with 2 nics :

eth0 <> inet
eth1 <> lan

dummy0 (i want to shape incoming traffic from lan machine on this interface)

my config:
tc qdisc del dev dummy0 root

tc qdisc add dev dummy0 root handle 1: htb
tc class add dev dummy0 parent 1: classid 1:1 htb rate 100kbit ceil 100kbit
tc class add dev dummy0 parent 1: classid 1:2 htb rate 100kbit ceil 100kbit


tc filter add dev dummy0 protocol ip pref 1 parent 1: handle 1 fw 
classid 1:1
tc filter add dev dummy0 protocol ip pref 2 parent 1: handle 2 fw 
classid 1:2

ifconfig dummy0 up



tc qdisc del dev eth1 root
tc qdisc add dev eth1 root handle 1: htb

tc filter add dev eth1 parent 1:0 protocol ip prio 10 u32 \
match ip dst 0/0 flowid 1:1 \
action ipt -j MARK --set-mark 2 \
action mirred egress redirect dev dummy0



tc qdisc del dev eth1 ingress

tc qdisc add dev eth1 ingress

tc filter add dev eth1 parent ffff: protocol ip prio 10 u32 \
match ip src 0/0 flowid 1:1 \
action ipt -j MARK --set-mark 1 \
action mirred egress redirect dev dummy0


and i have only tx-es on dummy0 interface no rx packets and lan machine 
cannot comunicate with server and vice-versa


any solutions ... i readed this post 
http://oss.sgi.com/projects/netdev/archive/2004-04/msg00251.html
and i have the same config ... but :)

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[LARTC] action redirect and dummy interface

[Paweł Staszewski]

Hello i have some problems on 2.6.14 kernel dummy and iproute :)

i have server with 2 nics :

eth0 <> inet
eth1 <> lan

dummy0 (i want to shape incoming traffic from lan machine on this interface)

my config:
tc qdisc del dev dummy0 root

tc qdisc add dev dummy0 root handle 1: htb
tc class add dev dummy0 parent 1: classid 1:1 htb rate 100kbit ceil 100kbit
tc class add dev dummy0 parent 1: classid 1:2 htb rate 100kbit ceil 100kbit


tc filter add dev dummy0 protocol ip pref 1 parent 1: handle 1 fw
classid 1:1
tc filter add dev dummy0 protocol ip pref 2 parent 1: handle 2 fw
classid 1:2

ifconfig dummy0 up



tc qdisc del dev eth1 root
tc qdisc add dev eth1 root handle 1: htb

tc filter add dev eth1 parent 1:0 protocol ip prio 10 u32 \
match ip dst 0/0 flowid 1:1 \
action ipt -j MARK --set-mark 2 \
action mirred egress redirect dev dummy0



tc qdisc del dev eth1 ingress

tc qdisc add dev eth1 ingress

tc filter add dev eth1 parent ffff: protocol ip prio 10 u32 \
match ip src 0/0 flowid 1:1 \
action ipt -j MARK --set-mark 1 \
action mirred egress redirect dev dummy0


and i have only tx-es on dummy0 interface no rx packets and lan machine
cannot comunicate with server and vice-versa


any solutions ... i readed this post
http://oss.sgi.com/projects/netdev/archive/2004-04/msg00251.html
and i have the same config ... but :)


_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] action redirect and dummy interface

[Tomasz Paszkowski]

[-- Attachment #1.1: Type: text/plain, Size: 335 bytes --]

On Fri, Nov 11, 2005 at 07:33:58AM +0100, Paweł Staszewski wrote:
> Hello i have some problems on 2.6.14 kernel dummy and iproute :)
[cut]
> 
> and i have only tx-es on dummy0 interface no rx packets and lan machine
> cannot comunicate with server and vice-versa
> 
> 

imho it's better to use imq.

-- 
Tomasz Paszkowski

[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] action redirect and dummy interface

[Andy Furniss]

[-- Attachment #1: Type: text/plain, Size: 1811 bytes --]

Paweł Staszewski wrote:
> Hello i have some problems on 2.6.14 kernel dummy and iproute :)
> 
> i have server with 2 nics :
> 
> eth0 <> inet
> eth1 <> lan
> 
> dummy0 (i want to shape incoming traffic from lan machine on this 
> interface)

OK but the script sends both egress and ingress on eth1 to dummy0.

> 
> my config:
> tc qdisc del dev dummy0 root
> 
> tc qdisc add dev dummy0 root handle 1: htb
> tc class add dev dummy0 parent 1: classid 1:1 htb rate 100kbit ceil 100kbit
> tc class add dev dummy0 parent 1: classid 1:2 htb rate 100kbit ceil 100kbit
> 
> 
> tc filter add dev dummy0 protocol ip pref 1 parent 1: handle 1 fw 
> classid 1:1
> tc filter add dev dummy0 protocol ip pref 2 parent 1: handle 2 fw 
> classid 1:2
> 
> ifconfig dummy0 up
> 
> 
> 
> tc qdisc del dev eth1 root
> tc qdisc add dev eth1 root handle 1: htb
> 
> tc filter add dev eth1 parent 1:0 protocol ip prio 10 u32 \
> match ip dst 0/0 flowid 1:1 \
> action ipt -j MARK --set-mark 2 \
> action mirred egress redirect dev dummy0
> 
> 
> 
> tc qdisc del dev eth1 ingress
> 
> tc qdisc add dev eth1 ingress
> 
> tc filter add dev eth1 parent ffff: protocol ip prio 10 u32 \
> match ip src 0/0 flowid 1:1 \
> action ipt -j MARK --set-mark 1 \
> action mirred egress redirect dev dummy0

Apart from adding a modprobe this works for me using the attached 
dummy.c on 2.6.12.


> 
> 
> and i have only tx-es on dummy0 interface no rx packets and lan machine 
> cannot comunicate with server and vice-versa
> 
> 
> any solutions ... i readed this post 
> http://oss.sgi.com/projects/netdev/archive/2004-04/msg00251.html
> and i have the same config ... but :)

That patch didn't go into kernel and was superseeded by another version 
which I attach - but AFAIK it's still not in kernel yet and jamal is 
still working on it.

Andy.

[-- Attachment #2: dummy.c.gz --]
[-- Type: application/x-gzip, Size: 2952 bytes --]

[-- Attachment #3: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] action redirect and dummy interface

[Paweł Staszewski]

Andy Furniss wrote:

> Paweł Staszewski wrote:
>
>> Hello i have some problems on 2.6.14 kernel dummy and iproute :)
>>
>> i have server with 2 nics :
>>
>> eth0 <> inet
>> eth1 <> lan
>>
>> dummy0 (i want to shape incoming traffic from lan machine on this 
>> interface)
>
>
> OK but the script sends both egress and ingress on eth1 to dummy0.
>

Yes i try to send ingress and egress packets from eth1  to dummy

>>
>> my config:
>> tc qdisc del dev dummy0 root
>>
>> tc qdisc add dev dummy0 root handle 1: htb
>> tc class add dev dummy0 parent 1: classid 1:1 htb rate 100kbit ceil 
>> 100kbit
>> tc class add dev dummy0 parent 1: classid 1:2 htb rate 100kbit ceil 
>> 100kbit
>>
>>
>> tc filter add dev dummy0 protocol ip pref 1 parent 1: handle 1 fw 
>> classid 1:1
>> tc filter add dev dummy0 protocol ip pref 2 parent 1: handle 2 fw 
>> classid 1:2
>>
>> ifconfig dummy0 up
>>
>>
>>
>> tc qdisc del dev eth1 root
>> tc qdisc add dev eth1 root handle 1: htb
>>
>> tc filter add dev eth1 parent 1:0 protocol ip prio 10 u32 \
>> match ip dst 0/0 flowid 1:1 \
>> action ipt -j MARK --set-mark 2 \
>> action mirred egress redirect dev dummy0
>>
>>
>>
>> tc qdisc del dev eth1 ingress
>>
>> tc qdisc add dev eth1 ingress
>>
>> tc filter add dev eth1 parent ffff: protocol ip prio 10 u32 \
>> match ip src 0/0 flowid 1:1 \
>> action ipt -j MARK --set-mark 1 \
>> action mirred egress redirect dev dummy0
>
>
> Apart from adding a modprobe this works for me using the attached 
> dummy.c on 2.6.12.
>
>
I load dummy on system start.

>>
>>
>> and i have only tx-es on dummy0 interface no rx packets and lan 
>> machine cannot comunicate with server and vice-versa
>>
>>
>> any solutions ... i readed this post 
>> http://oss.sgi.com/projects/netdev/archive/2004-04/msg00251.html
>> and i have the same config ... but :)
>
>
> That patch didn't go into kernel and was superseeded by another 
> version which I attach - but AFAIK it's still not in kernel yet and 
> jamal is still working on it.
>
> Andy.



Ok thanks i try your attached patch tommorow and try to do some tests.
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] action redirect and dummy interface

[Andy Furniss]

Paweł Staszewski wrote:

>> That patch didn't go into kernel and was superseeded by another 
>> version which I attach - but AFAIK it's still not in kernel yet and 
>> jamal is still working on it.
> 
> Ok thanks i try your attached patch tommorow and try to do some tests.
>

OK - it's not a patch - just replace drivers/net/dummy.c with the 
uncompressed attachment.

Andy.

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] action redirect and dummy interface

[Paweł Staszewski]

Andy Furniss wrote:

> Paweł Staszewski wrote:
>
>>> That patch didn't go into kernel and was superseeded by another 
>>> version which I attach - but AFAIK it's still not in kernel yet and 
>>> jamal is still working on it.
>>
>>
>> Ok thanks i try your attached patch tommorow and try to do some tests.
>>
>
> OK - it's not a patch - just replace drivers/net/dummy.c with the 
> uncompressed attachment.
>
> Andy.
>
>
>
ok i replace 2.6.14 dummy driver with yours and it is working.
thanks again
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc