netdev - Re: cannot classify vlanned traffic using tc-ematch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Mon, 19 Oct 2015 13:26:12 +0300
From:	Ido Barkan <ibarkan@...hat.com>
To:	netdev@...r.kernel.org
Subject: Re: cannot classify vlanned traffic using tc-ematch

For whom that this might be interesting, the missing part was a prfix
of the flowid:

$ tc filter replace dev eno2 protocol all parent 1389: pref 168 basic
match 'meta(vlan eq 168)' flowid 1389:a8

Thanks,
Ido

On Thu, Oct 15, 2015 at 2:08 PM, Ido Barkan <ibarkan@...hat.com> wrote:
> Hi all,
>
> We want to support host level qos in oVirt hypervisors, but are not
> able to classify
> the vlanned traffic generated by the host to our desired hsfc qdisc classes.
> SInce many of our customers use vlans, and vlans are the way we
> separate networks
> in the host, we have to be able to classify traffic according to vlan tag.
>
> Our first attempt using the simple u32 matcher failed because it is
> not working if the vlan
> tagging is offloaded to the hardware.
> As we were suggested in #netdev we tried once more using tc-ematch
> that should support
> this regardless of hardware acceleration.
>
> We tried several ways to configured the filter but it never works. We
> know it does not by:
> - looking at counter of "tc -s class show dev"
> - testing with iperf and seeing no shaping takes place
>
> We tried those combinations:
> * tc filter replace dev eno2 protocol 802.1q parent 1389: pref 16
> basic match "meta(vlan eq 16)" flowid 0x10
> * tc filter replace dev eno2 protocol 802.1q parent 1389: pref 16
> basic match meta(vlan mask 0xfff eq 0x10) flowid 0x10
> * tc filter replace dev eno2 protocol ip parent 1389: pref 16 basic
> match meta(vlan mask 0xfff eq 0x10) flowid 0x10
>
> But nothing works.
>
> kernel 3.10.0-320.el7.x86_64
>
> Can you help?
>
> --
> Thanks,
> Ido Barkan



-- 
Thanks,
Ido Barkan
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html