1#! /bin/sh -x 2# 3# sample script on using the ingress capabilities using u32 classifier 4# This script tags tcindex based on metering on the ingress 5# interface the result is used for fast classification and re-marking 6# on the egress interface 7# This is an example of a color aware mode marker with PIR configured 8# based on draft-wahjak-mcm-00.txt (section 3.1) 9# 10# The colors are defined using the Diffserv Fields 11#path to various utilities; 12#change to reflect yours. 13# 14IPROUTE=/usr/src/iproute2-current 15TC=$IPROUTE/tc/tc 16IP=$IPROUTE/ip/ip 17INDEV=eth0 18EGDEV="dev eth1" 19CIR1=1500kbit 20CIR2=1000kbit 21 22#The CBS is about 60 MTU sized packets 23CBS1=90k 24CBS2=90k 25 26############################################################ 27# 28# install the ingress qdisc on the ingress interface 29$TC qdisc add dev $INDEV handle ffff: ingress 30############################################################ 31# 32# Create u32 filters 33$TC filter add dev $INDEV parent ffff: protocol ip prio 4 handle 1: u32 \ 34divisor 1 35############################################################ 36 37# The meters: Note that we have shared meters in this case as identified 38# by the index parameter 39meter1=" police index 1 rate $CIR1 burst $CBS1 " 40meter2=" police index 2 rate $CIR2 burst $CBS1 " 41meter3=" police index 3 rate $CIR2 burst $CBS2 " 42meter4=" police index 4 rate $CIR1 burst $CBS2 " 43meter5=" police index 5 rate $CIR1 burst $CBS2 " 44 45# All packets are marked with a tcindex value which is used on the egress 46# tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE 47 48# *********************** AF41 *************************** 49#AF41 (DSCP 0x22) is passed on with a tcindex value 1 50#if it doesnt exceed its CIR/CBS 51#policer 1 is used. 52# 53$TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \ 54match ip tos 0x88 0xfc \ 55$meter1 \ 56continue flowid :1 57# 58# if it exceeds the above but not the extra rate/burst below, it gets a 59# tcindex value of 2 60# policer 2 is used 61# 62$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ 63match ip tos 0x88 0xfc \ 64$meter2 \ 65continue flowid :2 66# 67# if it exceeds the above but not the rule below, it gets a tcindex value 68# of 3 (policer 3) 69# 70$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 71match ip tos 0x88 0xfc \ 72$meter3 \ 73drop flowid :3 74# 75 76# *********************** AF42 *************************** 77#AF42 (DSCP 0x24) from is passed on with a tcindex value 2 78#if it doesnt exceed its CIR/CBS 79#policer 2 is used. Note that this is shared with the AF41 80# 81# 82$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ 83match ip tos 0x90 0xfc \ 84$meter2 \ 85continue flowid :2 86# 87# if it exceeds the above but not the rule below, it gets a tcindex value 88# of 3 (policer 3) 89# 90$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 91match ip tos 0x90 0xfc \ 92$meter3 \ 93drop flowid :3 94# 95# *********************** AF43 *************************** 96# 97#AF43 (DSCP 0x26) from is passed on with a tcindex value 3 98#if it doesnt exceed its CIR/CBS 99#policer 3 is used. Note that this is shared with the AF41 and AF42 100# 101$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 102match ip tos 0x98 0xfc \ 103$meter3 \ 104drop flowid :3 105# 106# *********************** BE *************************** 107# 108# Anything else (not from the AF4*) gets discarded if it 109# exceeds 1Mbps and by default goes to BE if it doesnt 110# Note that the BE class is also used by the AF4* in the worst 111# case 112# 113$TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ 114match ip src 0/0\ 115$meter4 \ 116drop flowid :4 117 118######################## Egress side ######################## 119 120# attach a dsmarker 121# 122$TC qdisc add $EGDEV handle 1:0 root dsmark indices 64 123# 124# values of the DSCP to change depending on the class 125#note that the ECN bits are masked out 126# 127#AF41 (0x88 is 0x22 shifted to the right by two bits) 128# 129$TC class change $EGDEV classid 1:1 dsmark mask 0x3 \ 130 value 0x88 131#AF42 132$TC class change $EGDEV classid 1:2 dsmark mask 0x3 \ 133 value 0x90 134#AF43 135$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ 136 value 0x98 137#BE 138$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ 139 value 0x0 140# 141# 142# The class mapping 143# 144$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 145 handle 1 tcindex classid 1:1 146$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 147 handle 2 tcindex classid 1:2 148$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 149 handle 3 tcindex classid 1:3 150$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 151 handle 4 tcindex classid 1:4 152# 153 154# 155echo "---- qdisc parameters Ingress ----------" 156$TC qdisc ls dev $INDEV 157echo "---- Class parameters Ingress ----------" 158$TC class ls dev $INDEV 159echo "---- filter parameters Ingress ----------" 160$TC filter ls dev $INDEV parent ffff: 161 162echo "---- qdisc parameters Egress ----------" 163$TC qdisc ls $EGDEV 164echo "---- Class parameters Egress ----------" 165$TC class ls $EGDEV 166echo "---- filter parameters Egress ----------" 167$TC filter ls $EGDEV parent 1:0 168# 169#deleting the ingress qdisc 170#$TC qdisc del $INDEV ingress 171