Changes in Makefile

ba24ea12 - net/sched: Retire ipt action

Thu, 21 Dec 2023 21:31:03 +0000

net/sched: Retire ipt actionThe tc ipt action was intended to run all netfilter/iptables target.Unfortunately it has not benefitted over the years from proper updates whennetfilter changes, and for that reason it has remained rudimentary.Pinging a bunch of people that i was aware were using this indicates thatremoving it wont affect them.Retire it to reduce maintenance efforts. Buh-bye.Reviewed-by: Victor Noguiera Reviewed-by: Pedro Tammela Signed-off-by: Jamal Hadi Salim Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

265b4da8 - net/sched: Retire rsvp classifier

Tue, 14 Feb 2023 13:49:15 +0000

net/sched: Retire rsvp classifierThe rsvp classifier has served us well for about a quarter of a century but hashas not been getting much maintenance attention due to lack of known users.Signed-off-by: Jamal Hadi Salim Acked-by: Jiri Pirko Signed-off-by: Paolo Abeni List of files: /linux-6.15/net/sched/Makefile

8c710f75 - net/sched: Retire tcindex classifier

Tue, 14 Feb 2023 13:49:14 +0000

net/sched: Retire tcindex classifierThe tcindex classifier has served us well for about a quarter of a centurybut has not been getting much TLC due to lack of known users. Most recentlyit has become easy prey to syzkaller. For this reason, we are retiring it.Signed-off-by: Jamal Hadi Salim Acked-by: Jiri Pirko Signed-off-by: Paolo Abeni List of files: /linux-6.15/net/sched/Makefile

bbe77c14 - net/sched: Retire dsmark qdisc

Tue, 14 Feb 2023 13:49:13 +0000

net/sched: Retire dsmark qdiscThe dsmark qdisc has served us well over the years for diffserv but has notbeen getting much attention due to other more popular approaches to do diffservservices. Most recently it has become a shooting target for syzkaller. For thisreason, we are retiring it.Signed-off-by: Jamal Hadi Salim Acked-by: Jiri Pirko Signed-off-by: Paolo Abeni List of files: /linux-6.15/net/sched/Makefile

fb38306c - net/sched: Retire ATM qdisc

Tue, 14 Feb 2023 13:49:12 +0000

net/sched: Retire ATM qdiscThe ATM qdisc has served us well over the years but has not been getting muchTLC due to lack of known users. Most recently it has become a shooting targetfor syzkaller. For this reason, we are retiring it.Signed-off-by: Jamal Hadi Salim Acked-by: Jiri Pirko Signed-off-by: Paolo Abeni List of files: /linux-6.15/net/sched/Makefile

051d4420 - net/sched: Retire CBQ qdisc

Tue, 14 Feb 2023 13:49:11 +0000

net/sched: Retire CBQ qdiscWhile this amazing qdisc has served us well over the years it has not beengetting any tender love and care and has bitrotted over time.It has become mostly a shooting target for syzkaller lately.For this reason, we are retiring it. Goodbye CBQ - we loved you.Signed-off-by: Jamal Hadi Salim Acked-by: Jiri Pirko Signed-off-by: Paolo Abeni List of files: /linux-6.15/net/sched/Makefile

1dfe086d - net/sched: taprio: centralize mqprio qopt validation

Sat, 04 Feb 2023 13:53:01 +0000

net/sched: taprio: centralize mqprio qopt validationThere is a lot of code in taprio which is "borrowed" from mqprio.It makes sense to put a stop to the "borrowing" and start actuallyreusing code.Because taprio and mqprio are built as part of different kernel modules,code reuse can only take place either by writing it as static inline(limiting), putting it in sch_generic.o (not generic enough), orcreating a third auto-selectable kernel module which only holds librarycode. I opted for the third variant.In a previous change, mqprio gained support for reverse TC:TXQ mappings,something which taprio still denies. Make taprio use the same validationlogic so that it supports this configuration as well.The taprio code didn't enforce TXQ overlaps in txtime-assist mode andthat looks intentional, even if I've no idea why that might be. Preservethat, but add a comment.There isn't any dedicated MAINTAINERS entry for mqprio, so nothing toupdate there.Signed-off-by: Vladimir Oltean Reviewed-by: Simon Horman Reviewed-by: Gerhard Engleder Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

c129412f - net/sched: sch_frag: add generic packet fragment support.

Wed, 25 Nov 2020 04:01:23 +0000

net/sched: sch_frag: add generic packet fragment support.Currently kernel tc subsystem can do conntrack in cat_ct. But when severalfragment packets go through the act_ct, function tcf_ct_handle_fragmentswill defrag the packets to a big one. But the last action will redirectmirred to a device which maybe lead the reassembly big packet over the mtuof target device.This patch add support for a xmit hook to mirred, that gets executed beforexmiting the packet. Then, when act_ct gets loaded, it configs that hook.The frag xmit hook maybe reused by other modules.Signed-off-by: wenxu Acked-by: Cong Wang Acked-by: Jamal Hadi Salim Signed-off-by: Jakub Kicinski List of files: /linux-6.15/net/sched/Makefile

a51c328d - net: qos: introduce a gate control flow action

Fri, 01 May 2020 00:53:15 +0000

net: qos: introduce a gate control flow actionIntroduce a ingress frame gate control flow action.Tc gate action does the work like this:Assume there is a gate allow specified ingress frames can be passed atspecific time slot, and be dropped at specific time slot. Tc filterchooses the ingress frames, and tc gate action would specify what slotdoes these frames can be passed to device and what time slot would bedropped.Tc gate action would provide an entry list to tell how much time gatekeep open and how much time gate keep state close. Gate action alsoassign a start time to tell when the entry list start. Then driver wouldrepeat the gate entry list cyclically.For the software simulation, gate action requires the user assign a timeclock type.Below is the setting example in user space. Tc filter a stream source ipaddress is 192.168.0.20 and gate action own two time slots. One is last200ms gate open let frame pass another is last 100ms gate close letframes dropped. When the ingress frames have reach total frames over8000000 bytes, the excessive frames will be dropped in that 200000000nstime slot.> tc qdisc add dev eth0 ingress> tc filter add dev eth0 parent ffff: protocol ip \ flower src_ip 192.168.0.20 \ action gate index 2 clockid CLOCK_TAI \ sched-entry open 200000000 -1 8000000 \ sched-entry close 100000000 -1 -1> tc chain del dev eth0 ingress chain 0"sched-entry" follow the name taprio style. Gate state is"open"/"close". Follow with period nanosecond. Then next item is internalpriority value means which ingress queue should put. "-1" meanswildcard. The last value optional specifies the maximum number ofMSDU octets that are permitted to pass the gate during the specifiedtime interval.Base-time is not set will be 0 as default, as result start time wouldbe ((N + 1) * cycletime) which is the minimal of future time.Below example shows filtering a stream with destination mac address is10:00:80:00:00:00 and ip type is ICMP, follow the action gate. The gateaction would run with one close time slot which means always keep close.The time cycle is total 200000000ns. The base-time would calculate by: 1357000000000 + (N + 1) * cycletimeWhen the total value is the future time, it will be the start time.The cycletime here would be 200000000ns for this case.> tc filter add dev eth0 parent ffff: protocol ip \ flower skip_hw ip_proto icmp dst_mac 10:00:80:00:00:00 \ action gate index 12 base-time 1357000000000 \ sched-entry close 200000000 -1 -1 \ clockid CLOCK_TAISigned-off-by: Po Liu Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

ec97ecf1 - net: sched: add Flow Queue PIE packet scheduler

Wed, 22 Jan 2020 18:22:33 +0000

net: sched: add Flow Queue PIE packet schedulerPrinciples: - Packets are classified on flows. - This is a Stochastic model (as we use a hash, several flows might be hashed to the same slot) - Each flow has a PIE managed queue. - Flows are linked onto two (Round Robin) lists, so that new flows have priority on old ones. - For a given flow, packets are not reordered. - Drops during enqueue only. - ECN capability is off by default. - ECN threshold (if ECN is enabled) is at 10% by default. - Uses timestamps to calculate queue delay by default.Usage:tc qdisc ... fq_pie [ limit PACKETS ] [ flows NUMBER ] [ target TIME ] [ tupdate TIME ] [ alpha NUMBER ] [ beta NUMBER ] [ quantum BYTES ] [ memory_limit BYTES ] [ ecnprob PERCENTAGE ] [ [no]ecn ] [ [no]bytemode ] [ [no_]dq_rate_estimator ]defaults: limit: 10240 packets, flows: 1024 target: 15 ms, tupdate: 15 ms (in jiffies) alpha: 1/8, beta : 5/4 quantum: device MTU, memory_limit: 32 Mb ecnprob: 10%, ecn: off bytemode: off, dq_rate_estimator: offSigned-off-by: Mohit P. Tahiliani Signed-off-by: Sachin D. Patil Signed-off-by: V. Saicharan Signed-off-by: Mohit Bhasi Signed-off-by: Leslie Monis Signed-off-by: Gautam Ramakrishnan Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

dcc68b4d - net: sch_ets: Add a new Qdisc

Wed, 18 Dec 2019 14:55:13 +0000

net: sch_ets: Add a new QdiscIntroduces a new Qdisc, which is based on 802.1Q-2014 wording. It isPRIO-like in how it is configured, meaning one needs to specify how manybands there are, how many are strict and how many are dwrr, quanta for thelatter, and priomap.The new Qdisc operates like the PRIO / DRR combo would when configured asper the standard. The strict classes, if any, are tried for traffic first.When there's no traffic in any of the strict queues, the ETS ones (if any)are treated in the same way as in DRR.Signed-off-by: Petr Machata Acked-by: Jiri Pirko Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

b57dc7c1 - net/sched: Introduce action ct

Tue, 09 Jul 2019 07:30:48 +0000

net/sched: Introduce action ctAllow sending a packet to conntrack module for connection tracking.The packet will be marked with conntrack connection's state, andany metadata such as conntrack mark and label. This state metadatacan later be matched against with tc classifers, for example with theflower classifier as below.In addition to committing new connections the user can optionallyspecific a zone to track within, set a mark/label and configure natwith an address range and port range.Usage is as follows:$ tc qdisc add dev ens1f0_0 ingress$ tc qdisc add dev ens1f0_1 ingress$ tc filter add dev ens1f0_0 ingress \ prio 1 chain 0 proto ip \ flower ip_proto tcp ct_state -trk \ action ct zone 2 pipe \ action goto chain 2$ tc filter add dev ens1f0_0 ingress \ prio 1 chain 2 proto ip \ flower ct_state +trk+new \ action ct zone 2 commit mark 0xbb nat src addr 5.5.5.7 pipe \ action mirred egress redirect dev ens1f0_1$ tc filter add dev ens1f0_0 ingress \ prio 1 chain 2 proto ip \ flower ct_zone 2 ct_mark 0xbb ct_state +trk+est \ action ct nat pipe \ action mirred egress redirect dev ens1f0_1$ tc filter add dev ens1f0_1 ingress \ prio 1 chain 0 proto ip \ flower ip_proto tcp ct_state -trk \ action ct zone 2 pipe \ action goto chain 1$ tc filter add dev ens1f0_1 ingress \ prio 1 chain 1 proto ip \ flower ct_zone 2 ct_mark 0xbb ct_state +trk+est \ action ct nat pipe \ action mirred egress redirect dev ens1f0_0Signed-off-by: Paul Blakey Signed-off-by: Marcelo Ricardo Leitner Signed-off-by: Yossi Kuperman Acked-by: Jiri Pirko Changelog:V5->V6: Added CONFIG_NF_DEFRAG_IPV6 in handle fragments ipv6 caseV4->V5: Reordered nf_conntrack_put() in tcf_ct_skb_nfct_cached()V3->V4: Added strict_start_type for act_ct policyV2->V3: Fixed david's comments: Removed extra newline after rcu in tcf_ct_params , and indent of break in act_ct.cV1->V2: Fixed parsing of ranges TCA_CT_NAT_IPV6_MAX as 'else' case overwritten ipv4 max Refactored NAT_PORT_MIN_MAX range handling as well Added ipv4/ipv6 defragmentation Removed extra skb pull push of nw offset in exectute nat Refactored tcf_ct_skb_network_trim after pull Removed TCA_ACT_CT defineSigned-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

2a2ea508 - net: sched: add mpls manipulation actions to TC

Sun, 07 Jul 2019 14:01:57 +0000

net: sched: add mpls manipulation actions to TCCurrently, TC offers the ability to match on the MPLS fields of a packetthrough the use of the flow_dissector_key_mpls struct. However, as yet, TCactions do not allow the modification or manipulation of such fields.Add a new module that registers TC action ops to allow manipulation ofMPLS. This includes the ability to push and pop headers as well as modifythe contents of new or existing headers. A further action to decrement theTTL field of an MPLS header is also provided with a new helper added tosupport this.Examples of the usage of the new action with flower rules to push and popMPLS labels are:tc filter add dev eth0 protocol ip parent ffff: flower \ action mpls push protocol mpls_uc label 123 \ action mirred egress redirect dev eth1tc filter add dev eth0 protocol mpls_uc parent ffff: flower \ action mpls pop protocol ipv4 \ action mirred egress redirect dev eth1Signed-off-by: John Hurley Reviewed-by: Jakub Kicinski Reviewed-by: Simon Horman Reviewed-by: Willem de Bruijn Acked-by: Cong Wang Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

24ec483c - net: sched: Introduce act_ctinfo action

Tue, 28 May 2019 17:03:50 +0000

net: sched: Introduce act_ctinfo actionctinfo is a new tc filter action module. It is designed to restoreinformation contained in firewall conntrack marks to other packet fieldsand is typically used on packet ingress paths. At present it has twoindependent sub-functions or operating modes, DSCP restoration mode &skb mark restoration mode.The DSCP restore mode:This mode copies DSCP values that have been placed in the firewallconntrack mark back into the IPv4/v6 diffserv fields of relevantpackets.The DSCP restoration is intended for use and has been found useful forrestoring ingress classifications based on egress classifications acrosslinks that bleach or otherwise change DSCP, typically home ISP Internetlinks. Restoring DSCP on ingress on the WAN link allows qdiscs such asbut by no means limited to CAKE to shape inbound packets according topolicies that are easier to set & mark on egress.Ingress classification is traditionally a challenging task sinceiptables rules haven't yet run and tc filter/eBPF programs are pre-NATlookups, hence are unable to see internal IPv4 addresses as used on thetypical home masquerading gateway. Thus marking the connection in somemanner on egress for later restoration of classification on ingress iseasier to implement.Parameters related to DSCP restore mode:dscpmask - a 32 bit mask of 6 contiguous bits and indicate bits of theconntrack mark field contain the DSCP value to be restored.statemask - a 32 bit mask of (usually) 1 bit length, outside the areaspecified by dscpmask. This represents a conditional operation flagwhereby the DSCP is only restored if the flag is set. This is useful toimplement a 'one shot' iptables based classification where the'complicated' iptables rules are only run once to classify theconnection on initial (egress) packet and subsequent packets are allmarked/restored with the same DSCP. A mask of zero disables theconditional behaviour ie. the conntrack mark DSCP bits are alwaysrestored to the ip diffserv field (assuming the conntrack entry is found& the skb is an ipv4/ipv6 type)e.g. dscpmask 0xfc000000 statemask 0x01000000|----0xFC----conntrack mark----000000---|| Bits 31-26 | bit 25 | bit24 |~~~ Bit 0|| DSCP | unused | flag |unused ||-----------------------0x01---000000---| | | | | ---| Conditional flag v only restore if set|-ip diffserv-|| 6 bits ||-------------|The skb mark restore mode (cpmark):This mode copies the firewall conntrack mark to the skb's mark field.It is completely the functional equivalent of the existing act_connmarkaction with the additional feature of being able to apply a mask to therestored value.Parameters related to skb mark restore mode:mask - a 32 bit mask applied to the firewall conntrack mark to mask outbits unwanted for restoration. This can be useful where the conntrackmark is being used for different purposes by different applications. Ifnot specified and by default the whole mark field is copied (i.e.default mask of 0xffffffff)e.g. mask 0x00ffffff to mask out the top 8 bits being used by theaforementioned DSCP restore mode.|----0x00----conntrack mark----ffffff---|| Bits 31-24 | || DSCP & flag| some value here ||---------------------------------------| | | v|------------skb mark-------------------|| | || zeroed | ||---------------------------------------|Overall parameters:zone - conntrack zonecontrol - action related control (reclassify | pipe | drop | continue |ok | goto chain )Signed-off-by: Kevin Darbyshire-Bryant Reviewed-by: Toke Høiland-Jørgensen Acked-by: Cong Wang Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

5a781ccb - tc: Add support for configuring the taprio scheduler

Sat, 29 Sep 2018 00:59:43 +0000

tc: Add support for configuring the taprio schedulerThis traffic scheduler allows traffic classes states (transmissionallowed/not allowed, in the simplest case) to be scheduled, accordingto a pre-generated time sequence. This is the basis of the IEEE802.1Qbv specification.Example configuration:tc qdisc replace dev enp3s0 parent root handle 100 taprio \ num_tc 3 \ map 2 2 1 0 2 2 2 2 2 2 2 2 2 2 2 2 \ queues 1@0 1@1 2@2 \ base-time 1528743495910289987 \ sched-entry S 01 300000 \ sched-entry S 02 300000 \ sched-entry S 04 300000 \ clockid CLOCK_TAIThe configuration format is similar to mqprio. The main difference isthe presence of a schedule, built by multiple "sched-entry"definitions, each entry has the following format: sched-entry The only supported is "S", which means "SetGateStates",following the IEEE 802.1Qbv-2015 definition (Table 8-6). is a bitmask where each bit is a associated with a traffic class, sobit 0 (the least significant bit) being "on" means that traffic class0 is "active" for that schedule entry. is a time durationin nanoseconds that specifies for how long that state defined by and should be held before moving to the next entry.This schedule is circular, that is, after the last entry is executedit starts from the first one, indefinitely.The other parameters can be defined as follows: - base-time: specifies the instant when the schedule starts, if 'base-time' is a time in the past, the schedule will start at base-time + (N * cycle-time) where N is the smallest integer so the resulting time is greater than "now", and "cycle-time" is the sum of all the intervals of the entries in the schedule; - clockid: specifies the reference clock to be used;The parameters should be similar to what the IEEE 802.1Q family ofspecification defines.Signed-off-by: Vinicius Costa Gomes Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

aea5f654 - net/sched: add skbprio scheduler

Mon, 23 Jul 2018 14:07:41 +0000

net/sched: add skbprio schedulerSkbprio (SKB Priority Queue) is a queueing discipline that prioritizes packetsaccording to their skb->priority field. Under congestion, already-enqueued lowerpriority packets will be dropped to make space available for higher prioritypackets. Skbprio was conceived as a solution for denial-of-service defenses thatneed to route packets with different priorities as a means to overcome DoSattacks.v5*Do not reference qdisc_dev(sch)->tx_queue_len for setting limit. Instead setdefault sch->limit to 64.v4*Drop Documentation/networking/sch_skbprio.txt doc file to move it to tc manpage for Skbprio, in iproute2.v3*Drop max_limit parameter in struct skbprio_sched_data and instead usesch->limit.*Reference qdisc_dev(sch)->tx_queue_len only once, during initialisation forqdisc (previously being referenced every time qdisc changes).*Move qdisc's detailed description from in-code to Documentation/networking.*When qdisc is saturated, enqueue incoming packet first before dequeueinglowest priority packet in queue - improves usage of call stack registers.*Introduce and use overlimit stat to keep track of number of dropped packets.v2*Use skb->priority field rather than DS field. Rename queueing discipline asSKB Priority Queue (previously Gatekeeper Priority Queue).*Queueing discipline is made classful to expose Skbprio's internal priorityqueues.Signed-off-by: Nishanth Devarajan Reviewed-by: Sachin Paryani Reviewed-by: Cody Doucette Reviewed-by: Michel Machado Acked-by: Cong Wang Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

50f699b1 - sched: fix trailing whitespace

Tue, 24 Jul 2018 19:29:01 +0000

sched: fix trailing whitespaceRemove trailing whitespace and blank lines at EOFSigned-off-by: Stephen Hemminger Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

046f6fd5 - sched: Add Common Applications Kept Enhanced (cake) qdisc

Fri, 06 Jul 2018 15:37:19 +0000

sched: Add Common Applications Kept Enhanced (cake) qdiscsch_cake targets the home router use case and is intended to squeeze themost bandwidth and latency out of even the slowest ISP links and routers,while presenting an API simple enough that even an ISP can configure it.Example of use on a cable ISP uplink:tc qdisc add dev eth0 cake bandwidth 20Mbit nat docsis ack-filterTo shape a cable download link (ifb and tc-mirred setup elided)tc qdisc add dev ifb0 cake bandwidth 200mbit nat docsis ingress washCAKE is filled with:* A hybrid Codel/Blue AQM algorithm, "Cobalt", tied to an FQ_Codel derived Flow Queuing system, which autoconfigures based on the bandwidth.* A novel "triple-isolate" mode (the default) which balances per-host and per-flow FQ even through NAT.* An deficit based shaper, that can also be used in an unlimited mode.* 8 way set associative hashing to reduce flow collisions to a minimum.* A reasonable interpretation of various diffserv latency/loss tradeoffs.* Support for zeroing diffserv markings for entering and exiting traffic.* Support for interacting well with Docsis 3.0 shaper framing.* Extensive support for DSL framing types.* Support for ack filtering.* Extensive statistics for measuring, loss, ecn markings, latency variation.A paper describing the design of CAKE is available athttps://arxiv.org/abs/1804.07617, and will be published at the 2018 IEEEInternational Symposium on Local and Metropolitan Area Networks (LANMAN).This patch adds the base shaper and packet scheduler, while subsequentcommits add the optional (configurable) features. The full userspace APIand most data structures are included in this commit, but options notunderstood in the base version will be ignored.Various versions baking have been available as an out of tree build forkernel versions going back to 3.10, as the embedded router world has beenrunning a few years behind mainline Linux. A stable version has beengenerally available on lede-17.01 and later.sch_cake replaces a combination of iptables, tc filter, htb and fq_codelin the sqm-scripts, with sane defaults and vastly simpler configuration.CAKE's principal author is Jonathan Morton, with contributions fromKevin Darbyshire-Bryant, Toke Høiland-Jørgensen, Sebastian Moeller,Ryan Mounce, Tony Ambardar, Dean Scarff, Nils Andreas Svee, Dave Täht,and Loganaden Velvindron.Testing from Pete Heist, Georgios Amanakis, and the many other members ofthe cake@lists.bufferbloat.net mailing list.tc -s qdisc show dev eth2 qdisc cake 8017: root refcnt 2 bandwidth 1Gbit diffserv3 triple-isolate split-gso rtt 100.0ms noatm overhead 38 mpu 84 Sent 51504294511 bytes 37724591 pkt (dropped 6, overlimits 64958695 requeues 12) backlog 0b 0p requeues 12 memory used: 1053008b of 15140Kb capacity estimate: 970Mbit min/max network layer size: 28 / 1500 min/max overhead-adjusted size: 84 / 1538 average network hdr offset: 14 Bulk Best Effort Voice thresh 62500Kbit 1Gbit 250Mbit target 5.0ms 5.0ms 5.0ms interval 100.0ms 100.0ms 100.0ms pk_delay 5us 5us 6us av_delay 3us 2us 2us sp_delay 2us 1us 1us backlog 0b 0b 0b pkts 3164050 25030267 9530280 bytes 3227519915 35396974782 12879808898 way_inds 0 8 0 way_miss 21 366 25 way_cols 0 0 0 drops 5 0 1 marks 0 0 0 ack_drop 0 0 0 sp_flows 1 3 0 bk_flows 0 1 1 un_flows 0 0 0 max_len 68130 68130 68130Tested-by: Pete Heist Tested-by: Georgios Amanakis Signed-off-by: Dave Taht Signed-off-by: Toke Høiland-Jørgensen Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

25db26a9 - net/sched: Introduce the ETF Qdisc

Tue, 03 Jul 2018 22:42:53 +0000

net/sched: Introduce the ETF QdiscThe ETF (Earliest TxTime First) qdisc uses the information addedearlier in this series (the socket option SO_TXTIME and the newrole of sk_buff->tstamp) to schedule packets transmission basedon absolute time.For some workloads, just bandwidth enforcement is not enough, andprecise control of the transmission of packets is necessary.Example:$ tc qdisc replace dev enp2s0 parent root handle 100 mqprio num_tc 3 \ map 2 2 1 0 2 2 2 2 2 2 2 2 2 2 2 2 queues 1@0 1@1 2@2 hw 0$ tc qdisc add dev enp2s0 parent 100:1 etf delta 100000 \ clockid CLOCK_TAIIn this example, the Qdisc will provide SW best-effort for the controlof the transmission time to the network adapter, the time stamp in thesocket will be in reference to the clockid CLOCK_TAI and packetswill leave the qdisc "delta" (100000) nanoseconds before its transmissiontime.The ETF qdisc will buffer packets sorted by their txtime. It will droppackets on enqueue() if their skbuff clockid does not match the clockreference of the Qdisc. Moreover, on dequeue(), a packet will be droppedif it expires while being enqueued.The qdisc also supports the SO_TXTIME deadline mode. For this mode, itwill dequeue a packet as soon as possible and change the skb timestampto 'now' during etf_dequeue().Note that both the qdisc's and the SO_TXTIME ABIs allow for a clockidto be configured, but it's been decided that usage of CLOCK_TAI shouldbe enforced until we decide to allow for other clockids to be used.The rationale here is that PTP times are usually in the TAI scale, thusno other clocks should be necessary. For now, the qdisc will returnEINVAL if any clocks other than CLOCK_TAI are used.Signed-off-by: Jesus Sanchez-Palencia Signed-off-by: Vinicius Costa Gomes Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile

ccc007e4 - net: sched: add em_ipt ematch for calling xtables matches

Thu, 15 Feb 2018 17:42:43 +0000

net: sched: add em_ipt ematch for calling xtables matchesThe commit a new tc ematch for using netfilter xtable matches.This allows early classification as well as mirroning/redirecting trafficbased on logic implemented in netfilter extensions.Current supported use case is classification based on the incoming IPSecstate used during decpsulation using the 'policy' iptables extension(xt_policy).The module dynamically fetches the netfilter match module and callsit using a fake xt_action_param structure based on validated userspaceprovided parameters.As the xt_policy match does not access skb->data, no skb modificationsare needed on match.Signed-off-by: Eyal Birger Signed-off-by: David S. Miller List of files: /linux-6.15/net/sched/Makefile