https://home.regit.org/tags/qos/ Recent content in QoS on To Linux and beyond ! Hugo fr Wed, 18 Sep 2013 12:57:21 +0000 https://home.regit.org/2013/09/using-tc-with-ipv6-and-ipv4/ Wed, 18 Sep 2013 12:57:21 +0000 https://home.regit.org/2013/09/using-tc-with-ipv6-and-ipv4/ <p>The first news is that <a href="http://comments.gmane.org/gmane.linux.network/233164">it works</a>! It is possible to use tc to setup QoS on IPv6 but the filter have to be updated.</p> <p>When working on adding IPv6 support to <a href="https://github.com/regit/lagfactory">lagfactory</a>, I found out by reading tc sources and specifically <a href="https://github.com/SVMP/android_external_busybox/blob/master/networking/libiproute/ll_proto.c">ll_proto.c</a> that the keyword to use for IPv6 was <em>ipv6</em>. Please read that file if you need to find the keyword for an other protocol.<br> So to send packet with Netfilter mark 5000 to a specific queue, one can use:</p> https://home.regit.org/2012/10/defend-your-network-from-word/ Tue, 09 Oct 2012 14:17:13 +0000 https://home.regit.org/2012/10/defend-your-network-from-word/ <h4 id="introduction">Introduction</h4> <p>Some times ago, I’ve blogged about <a href="https://home.regit.org/2011/04/some-new-features-of-ips-mode-in-suricata-1-1beta2/">new IPS features in Suricata 1.1</a> and did not find at the time<br> any killer application of the <em>nfq_set_mark</em> keyword. When using Suricata in Netfilter IPS mode, this keyword allows you to set the Netfilter mark on the packet when a rule match.<br> This mark can be used by Netfilter or by other network subsystem to differentiate the treatment to apply to the packet.</p>