#! /bin/sh # # sample script on using the ingress capabilities using u32 classifier # This script tags tcindex based on metering on the ingress # interface the result is used for fast classification and re-marking # on the egress interface # This is an example of a color blind mode marker with PIR configured # based on draft-wahjak-mcm-00.txt (section 3.2) # #path to various utilities; #change to reflect yours. # IPROUTE=/root/DS-6-beta/iproute2-990530-dsing TC=$IPROUTE/tc/tc IP=$IPROUTE/ip/ip INDEV=eth2 EGDEV="dev eth1" CIR1=1000kbit CIR2=1000kbit # The PIR is the excess (in addition to the CIR i.e if always # going to the PIR --> average rate is CIR+PIR) PIR1=1000kbit PIR2=500kbit #The CBS is about 60 MTU sized packets CBS1=90k CBS2=90k #the EBS is about 10 max sized packets EBS1=15k EBS2=15k # The meters meter1=" police rate $CIR1 burst $CBS1 " meter1a=" police rate $PIR1 burst $EBS1 " meter2=" police rate $CIR2 burst $CBS1 " meter2a="police rate $PIR2 burst $CBS1 " meter3=" police rate $CIR2 burst $CBS2 " meter3a=" police rate $PIR2 burst $EBS2 " meter4=" police rate $CIR1 burst $CBS2 " meter5=" police rate $CIR1 burst $CBS2 " # install the ingress qdisc on the ingress interface ############################################################ $TC qdisc add dev $INDEV handle ffff: ingress ############################################################ # ############################################################ # All packets are marked with a tcindex value which is used on the egress # NOTE: tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE # #anything from subnet 10.2.0.2/24 is passed on with a tcindex value 1 #if it doesnt exceed its CIR/CBS + PIR/EBS # $TC filter add dev $INDEV parent ffff: protocol ip prio 1 u32 \ match ip src 10.2.0.0/24 $meter1 \ continue flowid :1 $TC filter add dev $INDEV parent ffff: protocol ip prio 2 u32 \ match ip src 10.2.0.0/24 $meter1a \ continue flowid :1 # # if it exceeds the above but not the extra rate/burst below, it gets a #tcindex value of 2 # $TC filter add dev $INDEV parent ffff: protocol ip prio 3 u32 \ match ip src 10.2.0.0/24 $meter2 \ continue flowid :2 $TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \ match ip src 10.2.0.0/24 $meter2a \ continue flowid :2 # # if it exceeds the above but not the rule below, it gets a tcindex value # of 3 # $TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ match ip src 10.2.0.0/24 $meter3 \ continue flowid :3 $TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ match ip src 10.2.0.0/24 $meter3a \ continue flowid :3 # # if it exceeds the above but not the rule below, it gets a tcindex value # of 4 (BE) # $TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ match ip src 10.2.0.0/24 $meter4 \ drop flowid :4 # # Anything else (not from the subnet 10.2.0.24/24) gets discarded if it # exceeds 1Mbps and by default goes to BE if it doesnt # $TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ match ip src 0/0 $meter5 \ drop flowid :4 ######################## Egress side ######################## # attach a dsmarker # $TC qdisc add $EGDEV handle 1:0 root dsmark indices 64 # # values of the DSCP to change depending on the class #note that the ECN bits are masked out # #AF41 (0x88 is 0x22 shifted to the right by two bits) # $TC class change $EGDEV classid 1:1 dsmark mask 0x3 \ value 0x88 #AF42 $TC class change $EGDEV classid 1:2 dsmark mask 0x3 \ value 0x90 #AF43 $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ value 0x98 #BE $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ value 0x0 # # # The class mapping # $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ handle 1 tcindex classid 1:1 $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ handle 2 tcindex classid 1:2 $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ handle 3 tcindex classid 1:3 $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ handle 4 tcindex classid 1:4 # # echo "---- qdisc parameters Ingress ----------" $TC qdisc ls dev $INDEV echo "---- Class parameters Ingress ----------" $TC class ls dev $INDEV echo "---- filter parameters Ingress ----------" $TC filter ls dev $INDEV parent ffff: echo "---- qdisc parameters Egress ----------" $TC qdisc ls $EGDEV echo "---- Class parameters Egress ----------" $TC class ls $EGDEV echo "---- filter parameters Egress ----------" $TC filter ls $EGDEV parent 1:0 # #deleting the ingress qdisc #$TC qdisc del $INDEV ingress