lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame] | 1 | #! /bin/sh -x |
| 2 | # |
| 3 | # sample script on using the ingress capabilities using u32 classifier |
| 4 | # This script tags tcindex based on metering on the ingress |
| 5 | # interface the result is used for fast classification and re-marking |
| 6 | # on the egress interface |
| 7 | # This is an example of a color aware mode marker with PIR configured |
| 8 | # based on draft-wahjak-mcm-00.txt (section 3.1) |
| 9 | # |
| 10 | # The colors are defined using the Diffserv Fields |
| 11 | #path to various utilities; |
| 12 | #change to reflect yours. |
| 13 | # |
| 14 | IPROUTE=/usr/src/iproute2-current |
| 15 | TC=$IPROUTE/tc/tc |
| 16 | IP=$IPROUTE/ip/ip |
| 17 | INDEV=eth0 |
| 18 | EGDEV="dev eth1" |
| 19 | CIR1=1500kbit |
| 20 | CIR2=1000kbit |
| 21 | |
| 22 | #The CBS is about 60 MTU sized packets |
| 23 | CBS1=90k |
| 24 | CBS2=90k |
| 25 | |
| 26 | ############################################################ |
| 27 | # |
| 28 | # install the ingress qdisc on the ingress interface |
| 29 | $TC qdisc add dev $INDEV handle ffff: ingress |
| 30 | ############################################################ |
| 31 | # |
| 32 | # Create u32 filters |
| 33 | $TC filter add dev $INDEV parent ffff: protocol ip prio 4 handle 1: u32 \ |
| 34 | divisor 1 |
| 35 | ############################################################ |
| 36 | |
| 37 | # The meters: Note that we have shared meters in this case as identified |
| 38 | # by the index parameter |
| 39 | meter1=" police index 1 rate $CIR1 burst $CBS1 " |
| 40 | meter2=" police index 2 rate $CIR2 burst $CBS1 " |
| 41 | meter3=" police index 3 rate $CIR2 burst $CBS2 " |
| 42 | meter4=" police index 4 rate $CIR1 burst $CBS2 " |
| 43 | meter5=" police index 5 rate $CIR1 burst $CBS2 " |
| 44 | |
| 45 | # All packets are marked with a tcindex value which is used on the egress |
| 46 | # tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE |
| 47 | |
| 48 | # *********************** AF41 *************************** |
| 49 | #AF41 (DSCP 0x22) is passed on with a tcindex value 1 |
| 50 | #if it doesnt exceed its CIR/CBS |
| 51 | #policer 1 is used. |
| 52 | # |
| 53 | $TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \ |
| 54 | match ip tos 0x88 0xfc \ |
| 55 | $meter1 \ |
| 56 | continue flowid :1 |
| 57 | # |
| 58 | # if it exceeds the above but not the extra rate/burst below, it gets a |
| 59 | # tcindex value of 2 |
| 60 | # policer 2 is used |
| 61 | # |
| 62 | $TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ |
| 63 | match ip tos 0x88 0xfc \ |
| 64 | $meter2 \ |
| 65 | continue flowid :2 |
| 66 | # |
| 67 | # if it exceeds the above but not the rule below, it gets a tcindex value |
| 68 | # of 3 (policer 3) |
| 69 | # |
| 70 | $TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ |
| 71 | match ip tos 0x88 0xfc \ |
| 72 | $meter3 \ |
| 73 | drop flowid :3 |
| 74 | # |
| 75 | |
| 76 | # *********************** AF42 *************************** |
| 77 | #AF42 (DSCP 0x24) from is passed on with a tcindex value 2 |
| 78 | #if it doesnt exceed its CIR/CBS |
| 79 | #policer 2 is used. Note that this is shared with the AF41 |
| 80 | # |
| 81 | # |
| 82 | $TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ |
| 83 | match ip tos 0x90 0xfc \ |
| 84 | $meter2 \ |
| 85 | continue flowid :2 |
| 86 | # |
| 87 | # if it exceeds the above but not the rule below, it gets a tcindex value |
| 88 | # of 3 (policer 3) |
| 89 | # |
| 90 | $TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ |
| 91 | match ip tos 0x90 0xfc \ |
| 92 | $meter3 \ |
| 93 | drop flowid :3 |
| 94 | # |
| 95 | # *********************** AF43 *************************** |
| 96 | # |
| 97 | #AF43 (DSCP 0x26) from is passed on with a tcindex value 3 |
| 98 | #if it doesnt exceed its CIR/CBS |
| 99 | #policer 3 is used. Note that this is shared with the AF41 and AF42 |
| 100 | # |
| 101 | $TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ |
| 102 | match ip tos 0x98 0xfc \ |
| 103 | $meter3 \ |
| 104 | drop flowid :3 |
| 105 | # |
| 106 | # *********************** BE *************************** |
| 107 | # |
| 108 | # Anything else (not from the AF4*) gets discarded if it |
| 109 | # exceeds 1Mbps and by default goes to BE if it doesnt |
| 110 | # Note that the BE class is also used by the AF4* in the worst |
| 111 | # case |
| 112 | # |
| 113 | $TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ |
| 114 | match ip src 0/0\ |
| 115 | $meter4 \ |
| 116 | drop flowid :4 |
| 117 | |
| 118 | ######################## Egress side ######################## |
| 119 | |
| 120 | # attach a dsmarker |
| 121 | # |
| 122 | $TC qdisc add $EGDEV handle 1:0 root dsmark indices 64 |
| 123 | # |
| 124 | # values of the DSCP to change depending on the class |
| 125 | #note that the ECN bits are masked out |
| 126 | # |
| 127 | #AF41 (0x88 is 0x22 shifted to the right by two bits) |
| 128 | # |
| 129 | $TC class change $EGDEV classid 1:1 dsmark mask 0x3 \ |
| 130 | value 0x88 |
| 131 | #AF42 |
| 132 | $TC class change $EGDEV classid 1:2 dsmark mask 0x3 \ |
| 133 | value 0x90 |
| 134 | #AF43 |
| 135 | $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ |
| 136 | value 0x98 |
| 137 | #BE |
| 138 | $TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ |
| 139 | value 0x0 |
| 140 | # |
| 141 | # |
| 142 | # The class mapping |
| 143 | # |
| 144 | $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ |
| 145 | handle 1 tcindex classid 1:1 |
| 146 | $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ |
| 147 | handle 2 tcindex classid 1:2 |
| 148 | $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ |
| 149 | handle 3 tcindex classid 1:3 |
| 150 | $TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ |
| 151 | handle 4 tcindex classid 1:4 |
| 152 | # |
| 153 | |
| 154 | # |
| 155 | echo "---- qdisc parameters Ingress ----------" |
| 156 | $TC qdisc ls dev $INDEV |
| 157 | echo "---- Class parameters Ingress ----------" |
| 158 | $TC class ls dev $INDEV |
| 159 | echo "---- filter parameters Ingress ----------" |
| 160 | $TC filter ls dev $INDEV parent ffff: |
| 161 | |
| 162 | echo "---- qdisc parameters Egress ----------" |
| 163 | $TC qdisc ls $EGDEV |
| 164 | echo "---- Class parameters Egress ----------" |
| 165 | $TC class ls $EGDEV |
| 166 | echo "---- filter parameters Egress ----------" |
| 167 | $TC filter ls $EGDEV parent 1:0 |
| 168 | # |
| 169 | #deleting the ingress qdisc |
| 170 | #$TC qdisc del $INDEV ingress |