lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <95259a4e-5911-6b7b-65c1-ca33312c23ec@tarent.de> Date: Mon, 29 Aug 2022 17:03:08 +0200 (CEST) From: Thorsten Glaser <t.glaser@...ent.de> To: Jakub Kicinski <kuba@...nel.org> cc: netdev@...r.kernel.org Subject: Re: inter-qdisc communication? (note the communication aspect is still open, see near the end) On Fri, 26 Aug 2022, Jakub Kicinski wrote: > How do you add latency on ingress? š¤ Iāve found something that might do it. https://serverfault.com/a/386791/189656 and https://wiki.linuxfoundation.org/networking/netem#how_can_i_use_netem_on_incoming_traffic So, basically: $ extif=eth0 # or eth1 or wlan0 orā¦ $ sudo modprobe ifb # once or via config $ sudo ip link set dev ifb0 up $ sudo tc qdisc add dev $extif handle FFFF: ingress $ sudo tc filter add dev $extif parent FFFF: [ā¦ (see below) ā¦] $ sudo tc qdisc add dev ifb0 root myqdiscname optsā¦ All references to ifb seem to cargo-cult the following filterā¦ protocol ip u32 match u32 0 0 flowid 1:1 action mirred egress redirect dev ifb0 ā¦ without explaining any of it. (Iāve concerned myself more with the implementing of the qdisc than with the configuring, which my coworkers did before, and I found the info quiteā¦ not easily comprehensible.) Iāve found that mirred means mirror or redirect, so the action partās probably fine. Iām very unsure of the protocol/match part. I require any and all traffic of all protocols to be redirected. Not just IPv4, and not just traffic that matches anything. Can I do that with the filter, and will this ātrickā get me the effect I want to have? (I could just use netem but thereās still the issue of inter- qdisc communication which Iād *very* much like to have, not just for this but also for features that come laterā¦ and, perhaps, one thatās already thereāāāRAN āhandoverā emulation, i.e. stopping all traffic for a few dozen ms or so.) Thanks in advance, //mirabilos -- Infrastrukturexperte ā¢ tarent solutions GmbH Am Dickobskreuz 10, D-53121 Bonn ā¢ http://www.tarent.de/ Telephon +49 228 54881-393 ā¢ Fax: +49 228 54881-235 HRB AG Bonn 5168 ā¢ USt-ID (VAT): DE122264941 GeschƤftsfĆ¼hrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg **************************************************** /ā\ The UTF-8 Ribbon ā²Ā ā± Campaign against Mit dem tarent-Newsletter nichts mehr verpassen: Ā ā³Ā HTML eMail! Also, https://www.tarent.de/newsletter ā±Ā ā² header encryption! ****************************************************
Powered by blists - more mailing lists