Age | Commit message (Collapse) | Author |
|
This resolves problems with filter and classes for round-robin
policy.
Bug 5950 and 5952
(cherry picked from commit cb9532549c0eb2390cbd7d3eba1b5254bc7cb734)
|
|
Bug 5924
If ip protocol match was specified but no port match then the
code would incorrectly call getPort (undef, "tcp") which gets
interpreted as getPort("tcp") by Perl and causes error.
(cherry picked from commit 5ad6cc5026cd19cf994dd0670db4d0fa31f9010b)
|
|
Bug 5896
Need to insert dummy filter to match all packets
(cherry picked from commit 9f1e20193852f059afda8041192086313107b29f)
|
|
This reverts commit cf51e90bfc2d1c3b58192a726e786b598681fb71.
Conflicts:
templates/traffic-policy/limiter/node.tag/class/node.tag/precedence/node.def
|
|
The class configuration function was looking at wrong place
in configuration (bug introduced when default added).
|
|
|
|
Need to generate a filter to cause default filter rule to exist.
Otherwise default does nothing.
|
|
Cleaner to use %d for priority here.
|
|
Now vyatta user has permission through capability to run ethtool
|
|
|
|
Give correct message when queue limit too small in random detect
|
|
Bug 5879
|
|
For queue-type (other than fair-queue), it is allowable to have larger queue size.
Move validation into class checking.
|
|
|
|
This makes RED more robust since constant values are visible.
|
|
The calculation of random-detect queue parameters is based on recommended
values from RFC. If allowed bandwidth is too small, the queue will be
too small to be useable. In that case just fail.
|
|
Bug 5872
Don't allow stupidly small queue limit, and round up the minimum queue
value to be at least one packet.
|
|
This allows use of IANA (/etc/services) values for port names:
example:
traffic-policy shaper SS {
class 2 {
match SMTP ip destination port smtp
}
}
|
|
It is possible to use u32 to match on value and mark.
|
|
Can't have 2 filters at same priority level, need to cascade them.
|
|
Allow using common values supported by TC filter.
|
|
Missing $ in script
Bug 5854
|
|
Needs to be fwmark no fw_mark
|
|
Bug 5815
Allow match on firewall mark and interface id. Using meta match it
is possible to match on both.
|
|
Bug 5407
This fixes the confusing usage of priority field in both shaper
and limiter class. In limiter, it is renamed to precedence since
it controls the order of match rule evaluation.
|
|
It won't work because of how classifiers interact with policing.
See: http://ace-host.stuart.id.au/russell/files/tc/doc/police.txt
|
|
Comments contained reference to old syntax
|
|
|
|
Bug 5799 - Add matching on firewall mark values
Bug 5795 - Block match rules that have multiple underlying filters
|
|
If bandwidth not defined for rate limiter policy, the error message
should come from policy (not perl error checking).
|
|
Bug 5769
The incoming interface index was recorded with _dev but code
was looking for _indev
|
|
The name ip exists in /etc/protocols as a pseudonym for all IP protocols.
But the Qos match logic doesn't support it so do not allow the user to
choose that value
Bug 5689
|
|
This adds:
set traffic-policy limiter TL default bandwidth 1mbit
|
|
Command format error.
|
|
Current (Kenwood and earlier):
set qos-policy traffic-shaper TS { ...classes }
set qos-policy traffic-limiter TL { ...classes }
seq qos-policy network-emulator NE ...
set qos-policy random-detect RD ...
set qos-policy rate-limiter RC ...
set qos-policy round-robin RR ...
set interfaces ethernet eth0 qos-policy out TS
set interfaces ethernet eth0 qos-policy in TL
New (Larkspur and later):
set traffic-policy shaper TS { ...classes }
set traffic-policy limiter TL { ...classes }
seq traffic-policy network-emulator NE ...
set traffic-policy random-detect RD ...
set traffic-policy rate-control RC ...
set traffic-policy round-robin RR ...
set interfaces ethernet eth0 traffic-policy out TS
set interfaces ethernet eth0 traffic-policy in TL
set interfaces ethernet eth0 redirect ifb0
set interfaces ethernet eth0 mirror eth2
Note:
1. Only one of the following is allowed: "redirect", or "mirror"
2. Traffic-policy limiter is allowed with redirection/mirror and takes place
before mirror/redirect action (NEW)
3. Limiter policy may applied on output (NEW)
4. Only limiter policies can be applied on input (same as previous releases)
This does add some new functionality (#2, and #3) which are possible because
of how filter classes are implemented.
|
|
This reverts commit c8f2c288665143e2b165b7d448555af9d657b56c.
Conflicts:
scripts/vyatta-qos.pl
|
|
This reverts commit b75a66a4d5768f22a4b995d49ba442de8762a800.
|
|
Need to drop (not reclassify) packet when threshold is reached.
Bug 5599
|
|
Need to ensure success on package load
|
|
This changes:
qos-policy traffic-limiter foo class ...
interfaces ethernet eth0 qos-policy in foo
to
interface ethernet eth0 input-policy limit class ...
Which unifies all uses of ingress qdisc (limit, redirect, mirror)
into a single usage model.
|
|
Support mirror and redirect.
Note: traffic-limiter is broken (ignored), and will later be
moved to input-policy/limit
|
|
Bug 5123
Add ability to use traffic-shaper and other policies
for input traffic.
|
|
Simple limiting on output.
|
|
Missing space in command cause failure of filter.
Introduced with previous change to allow any protocol.
|
|
Just skip matching on ethernet type field, this allows both
IP and VLAN frames (and allows IPV6 over vlan). The downside is
some false matches possible on non-IP frames, but not a big issue.
Bug 4978
|
|
Need to pass police string in to Match filter generator.
Bug 4596
(cherry picked from commit 340773bacdacbb88586ff0ea8d053990205bd538)
|
|
Need some space to compute RED parameters
Bug 4594
(cherry picked from commit 603752d0771c2bdaf77e18e0f65135ac090fde85)
|
|
This resolves issues with mulitple filters (can't have same priority),
and IPV6 traffic-class/dscp match rules
Bug 4552
(cherry picked from commit da8a3fdc4e5cc526bb28f6959944f3635c23a6ed)
|
|
If matching on multiple protocols in same traffic-shaper class
then the filter command was garbaled.
Bug 4552
(cherry picked from commit 22e0d06a750abc2847e7e7bc96d8abf341a5bca1)
|
|
Special case of DSCP changing exposed bug in dscp match code.
Bug 4551
(cherry picked from commit 87f3e3dd1d054e5c356b8b9e251eb23b6a35bb32)
|