Re: cooperation between connection tracking and traffic shaping

[Eric Leblond <eric@inl.fr>]

[-- Attachment #1: Type: text/plain, Size: 918 bytes --]

Hi,

Le mercredi 01 novembre 2006 à 11:21 +0100, Filip Sneppe a écrit :
> Hi Yakov,
> 
> On 11/1/06, Yakov Lerner <iler.ml@gmail.com> wrote:
> > It worked. But I think it was ugly because:
> >     (2) maybe there is a much easier way to achieve this
> > qos-to-conntrack cooperation [than hacking conntrack modules] ?
> >
> Yes, the general way to do this, is to use the MARK target from
> netfilter to mark the packets you want to QoS and then use the fwmark
> from within your tc rules.
> 
> That works without hacking any code. Note that the fwmarks can also
> be used between netfilter and the advanced routing framework in the
> Linux kernel (ip route, ip rule, etc.)

Yes, but you have to use CONNMARK on top of that to be able to put the
mark on all packets of a connections. It also works with RELATED
packets. This will be useful with SIP ...

BR,
-- 
Eric Leblond <eric@inl.fr>
INL

[-- Attachment #2: Ceci est une partie de message numériquement signée --]
[-- Type: application/pgp-signature, Size: 189 bytes --]