Re: tc and CONNMARK

[Fabio Marcone <fabio.marcone@duet.it>]

Thanks for your reply,

> A first idea, without saw your rules, it's that you limit the wrong side
> of communication, however no one can help you without understand better
> your environment.
it's not possible because if I test only download flow or upload flow, 
limit rate is ok.

> Post your tc/iptables rules and commands.

I'm developing a firewall/router with some services and configuration 
it's not so easy to understand.

>
> P.s. Use two different mark for different update/download traffic
I'm using connmark so both flow of connection are marked with same mark 
(CONNMARK) but shaper rule are set on different interfaces:
mark 10 on eth0 -> classid 1:6
mark 10 on eth1 -> classid 2:6

where classes are build with these commands:
tc class add dev eth0 parent 1:1 classid 1:6 htb rate 600kbit ceil 
600kbit burst 6k cburst 64k quantum 1600
tc class add dev eth0 parent 2:1 classid 2:6 htb rate 600kbit ceil 
600kbit burst 6k cburst 64k quantum 1600

and filters are:
tc filter add dev eth0 parent 1: protocol ip handle 10 fw flowid 1:6
tc filter add dev eth1 parent 2: protocol ip handle 10 fw flowid 2:6

do you think is a connmark problem?