From: Patrick McHardy <kaber@trash.net>
To: Salatiel Filho <salatiel.filho@gmail.com>
Cc: Jan Engelhardt <jengelh@medozas.de>,
Jarek Poplawski <jarkao2@gmail.com>, "Y. D." <duyuyang@gmail.com>,
netdev <netdev@vger.kernel.org>,
netfilter-devel <netfilter-devel@vger.kernel.org>
Subject: Re: IMQ bug: kernel reboot immediately
Date: Thu, 23 Apr 2009 14:41:22 +0200 [thread overview]
Message-ID: <49F061F2.9000005@trash.net> (raw)
In-Reply-To: <beb91d720904230537s7f61c441g5af4a3acc1a0c2aa@mail.gmail.com>
Salatiel Filho wrote:
> On Thu, Apr 23, 2009 at 08:22, Patrick McHardy <kaber@trash.net> wrote:
>> Salatiel Filho wrote:
>>> Using imq i can shape upload on ppp0 [postrouting] while still having
>>> the internal private ips from the hosts, and i can shape download in
>>> ppp0 [prerouting] after get the correct nat'ed addresses.
>>>
>>> Is there a way to achieve this in IFB ? in a simple way ... :)
>> Currently not, the conntrack association is done at a later point.
>> We could add a classifier or TC action that performs the lookup
>> during ingress classification.
>>
>> Alternatively classifiers using conntrack information (like cls_flow)
>> could perform the lookup directly, but that would probably get a bit
>> ugly since some validation needs to be performed previously and it
>> would add a module dependency on conntrack.
>>
>>
> Using this actions would make sfq hashing by dest ip or source ip
> work just like it works in imq ?
Not with the SFQ default hash since it classifies based on the
addresses in the IP header. But you could use the flow classifier,
which can use the addresses from the conntrack entry. This would
behave similar to IMQ+SFQ.
next prev parent reply other threads:[~2009-04-23 12:41 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-04-22 15:27 IMQ bug: kernel reboot immediately Y. D.
2009-04-23 8:43 ` Jarek Poplawski
2009-04-23 10:20 ` Patrick McHardy
2009-04-23 10:23 ` Jan Engelhardt
2009-04-23 10:28 ` Patrick McHardy
2009-04-23 11:12 ` Salatiel Filho
2009-04-23 11:22 ` Patrick McHardy
2009-04-23 11:40 ` Jarek Poplawski
2009-04-23 11:46 ` Patrick McHardy
2009-04-23 12:11 ` Jarek Poplawski
2009-04-23 12:13 ` Patrick McHardy
2009-04-23 12:37 ` Salatiel Filho
2009-04-23 12:41 ` Patrick McHardy [this message]
2009-04-23 23:32 ` Salatiel Filho
2009-04-24 14:49 ` Patrick McHardy
2009-04-24 14:55 ` Denys Fedoryschenko
2009-04-24 15:14 ` Salatiel Filho
2009-04-24 15:19 ` Patrick McHardy
2009-04-24 15:23 ` Salatiel Filho
2009-04-24 15:29 ` Patrick McHardy
2009-04-23 12:29 ` Y. D.
2009-04-23 12:46 ` Jarek Poplawski
2009-05-02 12:03 ` pud
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=49F061F2.9000005@trash.net \
--to=kaber@trash.net \
--cc=duyuyang@gmail.com \
--cc=jarkao2@gmail.com \
--cc=jengelh@medozas.de \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=salatiel.filho@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).