qos: T6393: police ingress traffic before redirecting it

With an ingress limiter and "redirect" on the same interface, the redirect
filter was evaluated first and took all traffic, so the limiter never
applied.

The limiter filters of such an interface now redirect the traffic after
policing it: what exceeds the rate is handled by "exceed", conforming
traffic is redirected. A "not-exceed ok" is passed on to the redirect
instead of ending the actions. The interface's own redirect filter moves
to the lowest priority and only catches traffic no limiter class matched;
an interface commit only replaces that filter and keeps the limiter in
place.

0 files changed, 0 insertions, 0 deletions