Re: RFC: promote netfilter MARK value from IPv6 packets to sit packets
From: Harald Welte <hidden>
Date: 2003-02-23 19:33:39
Also in:
netfilter-devel
Attachments
- (unnamed) [application/pgp-signature] 232 bytes
From: Harald Welte <hidden>
Date: 2003-02-23 19:33:39
Also in:
netfilter-devel
On Mon, Feb 17, 2003 at 03:57:27PM +0100, Erik Hensema wrote:
In order to be able to provide QoS on tunneled IPv6 connections, I've created a simple patch (definately not ready for inclusion in the kernel, since it surely needs a configuration option) which promotes the netfilter MARK value from the IPv6 packets to the sit packets. Now I can mark packets using ip6tables, and on the ipv4 level I can still differentiate between the priorities. Problem solved, I'm happy ;-)
I like this patch. I think we should make it a kernel configuration option, but for all kind of tunnel interfaces. Something like 'propagate NFMARK while tunneling' (or maybe 'preserve' instead of 'propagate' is better language?) DaveM: Would this be acceptable?
Erik Hensema (erik@hensema.net)
-- - Harald Welte [off-list ref] http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie