From patchwork Mon Oct 4 17:52:21 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Michael Tremer X-Patchwork-Id: 4761 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4HNSx541BMz46JS for ; Mon, 4 Oct 2021 17:52:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4HNSx21tJLz131; Mon, 4 Oct 2021 17:52:54 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4HNSx13dnmz2yZk; Mon, 4 Oct 2021 17:52:53 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4HNSx01qdbz2yZk for ; Mon, 4 Oct 2021 17:52:52 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4HNSx00pvZzhl; Mon, 4 Oct 2021 17:52:52 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1633369972; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=EQc1yOOE2pd85wKqE1gxt+NyhKLrObGw5/rLrZoyoaE=; b=DKqKrGKY5tPWI+lnGibaevz0uXIXAl/4mbayt5XwEivcEQU1il8Q2VJq1S4nr2pevOYnbD O9ui8aF6kcvfKOCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1633369972; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=EQc1yOOE2pd85wKqE1gxt+NyhKLrObGw5/rLrZoyoaE=; b=G4v5wSaWxdXS9R5khTH3d00tbzeE39nz4/oXy8Bg9KoBvcZ/B5CA3Dps7SX+rfr/UyrwrO XXwD1+rbWZdJqgVGXnMJ7kM9c9XWjt+4mH37qcPitHHjZrJq3lkCTvIhwWC47KL94ko8ZV +VTEKwOoJokFA1SGXwYCQdot+X1s0wNM1167YL1K9EITMRYbPbWDanaM5lUDSE4fvOirH0 K9XIiGaSeH26KwYF0kSW1qASp6Xe9Di3vqKV3iWfdO6Aozr7CXaraDaYi359cnttQDE05k plXlSjST3zbasNv4y0+xeuOXq/vlknrfPO3+Cvnjur4GhPkgX56od3LtMrOIdQ== From: Michael Tremer To: development@lists.ipfire.org Subject: [PATCH 5/6] QoS: Make outgoing packet processing use CONNMARK Date: Mon, 4 Oct 2021 18:52:21 +0100 Message-Id: <20211004175222.9208-5-michael.tremer@ipfire.org> In-Reply-To: <20211004175222.9208-1-michael.tremer@ipfire.org> References: <20211004175222.9208-1-michael.tremer@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Michael Tremer Errors-To: development-bounces@lists.ipfire.org Sender: "Development" This will significantly reduce the load when classifying outgoing traffic as there won't be any overhead as soon as the connection has been classified. The classficiation is being stored in the iptables MARK which will be copied to CONNMARK if changed. Signed-off-by: Michael Tremer --- config/qos/makeqosscripts.pl | 30 +++++++++--------------------- 1 file changed, 9 insertions(+), 21 deletions(-) diff --git a/config/qos/makeqosscripts.pl b/config/qos/makeqosscripts.pl index 230dc3265..b1bb637b3 100644 --- a/config/qos/makeqosscripts.pl +++ b/config/qos/makeqosscripts.pl @@ -217,7 +217,10 @@ print </dev/null 2>&1