From mboxrd@z Thu Jan  1 00:00:00 1970
From: Andy Furniss <adf.lists@gmail.com>
Date: Tue, 11 Aug 2015 09:31:49 +0000
Subject: Re: combining 'fw' and 'u32' classfier?
Message-Id: <55C9C105.80502@gmail.com>
List-Id: <lartc.vger.kernel.org>
References: <CAA5aLPguTr9wKhykyrjYfhPRd_sV2bByLEXn8z3HDtt-yBQWUA@mail.gmail.com>
In-Reply-To: <CAA5aLPguTr9wKhykyrjYfhPRd_sV2bByLEXn8z3HDtt-yBQWUA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

Akshat Kakkar wrote:
> IS there a possibility to combine 'fw' classifier and 'u32'
> classifier to frame rule like if fw mark is 100 and destination is
> 8.8.8.8 then do rate limiting by flow id 1:1.

Use u32 match mark.

You can do quite complex stuff with the mark match eg. you can work in
hex in both iptables and u32 match (by putting 0x before the marks).

This allows you to use bitwise commands like or in iptables to modify
sections of marks that have already been set elsewhere and later in tc
use masks to look at different bits of a mark.