Age | Commit message (Collapse) | Author |
|
Bug 5849
|
|
Since queue limit of zero causes all packets to be dropped;
require user to configure a reasonable value
Bug 5842
|
|
There is no way for firewall mark to be useful in limiter policy
since limiter is only allowed on ingress. And ingress takes place
before firewall rules are applied.
|
|
Bug 5407
This fixes the confusing usage of priority field in both shaper
and limiter class. In limiter, it is renamed to precedence since
it controls the order of match rule evaluation.
|
|
Bug 5799 - Add matching on firewall mark values
Bug 5795 - Block match rules that have multiple underlying filters
|
|
Bug 5783
|
|
The name ip exists in /etc/protocols as a pseudonym for all IP protocols.
But the Qos match logic doesn't support it so do not allow the user to
choose that value
Bug 5689
|
|
This adds:
set traffic-policy limiter TL default bandwidth 1mbit
|
|
Current (Kenwood and earlier):
set qos-policy traffic-shaper TS { ...classes }
set qos-policy traffic-limiter TL { ...classes }
seq qos-policy network-emulator NE ...
set qos-policy random-detect RD ...
set qos-policy rate-limiter RC ...
set qos-policy round-robin RR ...
set interfaces ethernet eth0 qos-policy out TS
set interfaces ethernet eth0 qos-policy in TL
New (Larkspur and later):
set traffic-policy shaper TS { ...classes }
set traffic-policy limiter TL { ...classes }
seq traffic-policy network-emulator NE ...
set traffic-policy random-detect RD ...
set traffic-policy rate-control RC ...
set traffic-policy round-robin RR ...
set interfaces ethernet eth0 traffic-policy out TS
set interfaces ethernet eth0 traffic-policy in TL
set interfaces ethernet eth0 redirect ifb0
set interfaces ethernet eth0 mirror eth2
Note:
1. Only one of the following is allowed: "redirect", or "mirror"
2. Traffic-policy limiter is allowed with redirection/mirror and takes place
before mirror/redirect action (NEW)
3. Limiter policy may applied on output (NEW)
4. Only limiter policies can be applied on input (same as previous releases)
This does add some new functionality (#2, and #3) which are possible because
of how filter classes are implemented.
|