| #! /bin/sh | |
| # | |
| # sample script on using the ingress capabilities using u32 classifier | |
| # This script tags tcindex based on metering on the ingress | |
| # interface the result is used for fast classification and re-marking | |
| # on the egress interface | |
| # This is an example of a color blind mode marker with PIR configured | |
| # based on draft-wahjak-mcm-00.txt (section 3.2) | |
| # | |
| #path to various utilities; | |
| #change to reflect yours. | |
| # | |
| IPROUTE=/root/DS-6-beta/iproute2-990530-dsing | |
| TC=$IPROUTE/tc/tc | |
| IP=$IPROUTE/ip/ip | |
| INDEV=eth2 | |
| EGDEV="dev eth1" | |
| CIR1=1000kbit | |
| CIR2=1000kbit | |
| # The PIR is the excess (in addition to the CIR i.e if always | |
| # going to the PIR --> average rate is CIR+PIR) | |
| PIR1=1000kbit | |
| PIR2=500kbit | |
| #The CBS is about 60 MTU sized packets | |
| CBS1=90k | |
| CBS2=90k | |
| #the EBS is about 10 max sized packets | |
| EBS1=15k | |
| EBS2=15k | |
| # The meters | |
| meter1=" police rate $CIR1 burst $CBS1 " | |
| meter1a=" police rate $PIR1 burst $EBS1 " | |
| meter2=" police rate $CIR2 burst $CBS1 " | |
| meter2a="police rate $PIR2 burst $CBS1 " | |
| meter3=" police rate $CIR2 burst $CBS2 " | |
| meter3a=" police rate $PIR2 burst $EBS2 " | |
| meter4=" police rate $CIR1 burst $CBS2 " | |
| meter5=" police rate $CIR1 burst $CBS2 " | |
| # install the ingress qdisc on the ingress interface | |
| ############################################################ | |
| $TC qdisc add dev $INDEV handle ffff: ingress | |
| ############################################################ | |
| # | |
| ############################################################ | |
| # All packets are marked with a tcindex value which is used on the egress | |
| # NOTE: tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE | |
| # | |
| #anything from subnet 10.2.0.2/24 is passed on with a tcindex value 1 | |
| #if it doesnt exceed its CIR/CBS + PIR/EBS | |
| # | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 1 u32 \ | |
| match ip src 10.2.0.0/24 $meter1 \ | |
| continue flowid :1 | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 2 u32 \ | |
| match ip src 10.2.0.0/24 $meter1a \ | |
| continue flowid :1 | |
| # | |
| # if it exceeds the above but not the extra rate/burst below, it gets a | |
| #tcindex value of 2 | |
| # | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 3 u32 \ | |
| match ip src 10.2.0.0/24 $meter2 \ | |
| continue flowid :2 | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \ | |
| match ip src 10.2.0.0/24 $meter2a \ | |
| continue flowid :2 | |
| # | |
| # if it exceeds the above but not the rule below, it gets a tcindex value | |
| # of 3 | |
| # | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ | |
| match ip src 10.2.0.0/24 $meter3 \ | |
| continue flowid :3 | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ | |
| match ip src 10.2.0.0/24 $meter3a \ | |
| drop flowid :3 | |
| # | |
| # | |
| # Anything else (not from the subnet 10.2.0.24/24) gets discarded if it | |
| # exceeds 1Mbps and by default goes to BE if it doesnt | |
| # | |
| $TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ | |
| match ip src 0/0 $meter5 \ | |
| drop flowid :4 | |
| ######################## Egress side ######################## | |
| # attach a dsmarker | |
| # | |
| $TC qdisc add $EGDEV handle 1:0 root dsmark indices 64 | |
| # | |
| # values of the DSCP to change depending on the class | |
| #note that the ECN bits are masked out | |
| # | |
| #AF41 (0x88 is 0x22 shifted to the right by two bits) | |
| # | |
| $TC class change $EGDEV classid 1:1 dsmark mask 0x3 \ | |
| value 0x88 | |
| #AF42 | |
| $TC class change $EGDEV classid 1:2 dsmark mask 0x3 \ | |
| value 0x90 | |
| #AF43 | |
| $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ | |
| value 0x98 | |
| #BE | |
| $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ | |
| value 0x0 | |
| # | |
| # | |
| # The class mapping | |
| # | |
| $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ | |
| handle 1 tcindex classid 1:1 | |
| $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ | |
| handle 2 tcindex classid 1:2 | |
| $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ | |
| handle 3 tcindex classid 1:3 | |
| $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ | |
| handle 4 tcindex classid 1:4 | |
| # | |
| # | |
| echo "---- qdisc parameters Ingress ----------" | |
| $TC qdisc ls dev $INDEV | |
| echo "---- Class parameters Ingress ----------" | |
| $TC class ls dev $INDEV | |
| echo "---- filter parameters Ingress ----------" | |
| $TC filter ls dev $INDEV parent ffff: | |
| echo "---- qdisc parameters Egress ----------" | |
| $TC qdisc ls $EGDEV | |
| echo "---- Class parameters Egress ----------" | |
| $TC class ls $EGDEV | |
| echo "---- filter parameters Egress ----------" | |
| $TC filter ls $EGDEV parent 1:0 | |
| # | |
| #deleting the ingress qdisc | |
| #$TC qdisc del $INDEV ingress |