|
|
Traffic Control Super Script 5.1.63 (Default branch)
03-03-2008
Tcss implements traffic shaping using iproute2 and iptables. It supports multiple network interfaces, layer7 shaping (l7-filter module is required), grouping of networks / hosts, bandwidth bursting, sharing bandwidth between networks within groups, network exclusions, and multiport rules, and can shape by TCP/UDP port, IP, network block, and layer7 (payload). It also supports a flat file or MySQL backend. License: GNU General Public License v2 Changes:|
|
Firewall mark classifier in tc(8) Linux Firewall mark classifier in tc(8) NAME
fw - fwmark traffic control filter SYNOPSIS
tc filter ... fw [ classid CLASSID ] [ action ACTION_SPEC ] DESCRIPTION
the fw filter allows to classify packets based on a previously set fwmark by iptables. If it is identical to the filter's handle, the fil- ter matches. iptables allows to mark single packets with the MARK target, or whole connections using CONNMARK. The benefit of using this filter instead of doing the heavy-lifting with tc itself is that on one hand it might be convenient to keep packet filtering and classifi- cation in one place, possibly having to match a packet just once, and on the other users familiar with iptables but not tc will have a less hard time adding QoS to their setups. OPTIONS
classid CLASSID Push matching packets to the class identified by CLASSID. action ACTION_SPEC Apply an action from the generic actions framework on matching packets. EXAMPLES
Take e.g. the following tc filter statement: tc filter add ... handle 6 fw classid 1:1 will match if the packet's fwmark value is 6. This is a sample iptables statement marking packets coming in on eth0: iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 6 SEE ALSO
tc(8), iptables(8), iptables-extensions(8) iproute2 21 Oct 2015 Firewall mark classifier in tc(8)