1*de1e4e89SAndroid Build Coastguard Worker#! /bin/sh -x 2*de1e4e89SAndroid Build Coastguard Worker# 3*de1e4e89SAndroid Build Coastguard Worker# sample script on using the ingress capabilities using u32 classifier 4*de1e4e89SAndroid Build Coastguard Worker# This script tags tcindex based on metering on the ingress 5*de1e4e89SAndroid Build Coastguard Worker# interface the result is used for fast classification and re-marking 6*de1e4e89SAndroid Build Coastguard Worker# on the egress interface 7*de1e4e89SAndroid Build Coastguard Worker# This is an example of a color aware mode marker with PIR configured 8*de1e4e89SAndroid Build Coastguard Worker# based on draft-wahjak-mcm-00.txt (section 3.1) 9*de1e4e89SAndroid Build Coastguard Worker# 10*de1e4e89SAndroid Build Coastguard Worker# The colors are defined using the Diffserv Fields 11*de1e4e89SAndroid Build Coastguard Worker#path to various utilities; 12*de1e4e89SAndroid Build Coastguard Worker#change to reflect yours. 13*de1e4e89SAndroid Build Coastguard Worker# 14*de1e4e89SAndroid Build Coastguard WorkerIPROUTE=/usr/src/iproute2-current 15*de1e4e89SAndroid Build Coastguard WorkerTC=$IPROUTE/tc/tc 16*de1e4e89SAndroid Build Coastguard WorkerIP=$IPROUTE/ip/ip 17*de1e4e89SAndroid Build Coastguard WorkerINDEV=eth0 18*de1e4e89SAndroid Build Coastguard WorkerEGDEV="dev eth1" 19*de1e4e89SAndroid Build Coastguard WorkerCIR1=1500kbit 20*de1e4e89SAndroid Build Coastguard WorkerCIR2=1000kbit 21*de1e4e89SAndroid Build Coastguard Worker 22*de1e4e89SAndroid Build Coastguard Worker#The CBS is about 60 MTU sized packets 23*de1e4e89SAndroid Build Coastguard WorkerCBS1=90k 24*de1e4e89SAndroid Build Coastguard WorkerCBS2=90k 25*de1e4e89SAndroid Build Coastguard Worker 26*de1e4e89SAndroid Build Coastguard Worker############################################################ 27*de1e4e89SAndroid Build Coastguard Worker# 28*de1e4e89SAndroid Build Coastguard Worker# install the ingress qdisc on the ingress interface 29*de1e4e89SAndroid Build Coastguard Worker$TC qdisc add dev $INDEV handle ffff: ingress 30*de1e4e89SAndroid Build Coastguard Worker############################################################ 31*de1e4e89SAndroid Build Coastguard Worker# 32*de1e4e89SAndroid Build Coastguard Worker# Create u32 filters 33*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 4 handle 1: u32 \ 34*de1e4e89SAndroid Build Coastguard Workerdivisor 1 35*de1e4e89SAndroid Build Coastguard Worker############################################################ 36*de1e4e89SAndroid Build Coastguard Worker 37*de1e4e89SAndroid Build Coastguard Worker# The meters: Note that we have shared meters in this case as identified 38*de1e4e89SAndroid Build Coastguard Worker# by the index parameter 39*de1e4e89SAndroid Build Coastguard Workermeter1=" police index 1 rate $CIR1 burst $CBS1 " 40*de1e4e89SAndroid Build Coastguard Workermeter2=" police index 2 rate $CIR2 burst $CBS1 " 41*de1e4e89SAndroid Build Coastguard Workermeter3=" police index 3 rate $CIR2 burst $CBS2 " 42*de1e4e89SAndroid Build Coastguard Workermeter4=" police index 4 rate $CIR1 burst $CBS2 " 43*de1e4e89SAndroid Build Coastguard Workermeter5=" police index 5 rate $CIR1 burst $CBS2 " 44*de1e4e89SAndroid Build Coastguard Worker 45*de1e4e89SAndroid Build Coastguard Worker# All packets are marked with a tcindex value which is used on the egress 46*de1e4e89SAndroid Build Coastguard Worker# tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE 47*de1e4e89SAndroid Build Coastguard Worker 48*de1e4e89SAndroid Build Coastguard Worker# *********************** AF41 *************************** 49*de1e4e89SAndroid Build Coastguard Worker#AF41 (DSCP 0x22) is passed on with a tcindex value 1 50*de1e4e89SAndroid Build Coastguard Worker#if it doesnt exceed its CIR/CBS 51*de1e4e89SAndroid Build Coastguard Worker#policer 1 is used. 52*de1e4e89SAndroid Build Coastguard Worker# 53*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \ 54*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x88 0xfc \ 55*de1e4e89SAndroid Build Coastguard Worker$meter1 \ 56*de1e4e89SAndroid Build Coastguard Workercontinue flowid :1 57*de1e4e89SAndroid Build Coastguard Worker# 58*de1e4e89SAndroid Build Coastguard Worker# if it exceeds the above but not the extra rate/burst below, it gets a 59*de1e4e89SAndroid Build Coastguard Worker# tcindex value of 2 60*de1e4e89SAndroid Build Coastguard Worker# policer 2 is used 61*de1e4e89SAndroid Build Coastguard Worker# 62*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ 63*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x88 0xfc \ 64*de1e4e89SAndroid Build Coastguard Worker$meter2 \ 65*de1e4e89SAndroid Build Coastguard Workercontinue flowid :2 66*de1e4e89SAndroid Build Coastguard Worker# 67*de1e4e89SAndroid Build Coastguard Worker# if it exceeds the above but not the rule below, it gets a tcindex value 68*de1e4e89SAndroid Build Coastguard Worker# of 3 (policer 3) 69*de1e4e89SAndroid Build Coastguard Worker# 70*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 71*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x88 0xfc \ 72*de1e4e89SAndroid Build Coastguard Worker$meter3 \ 73*de1e4e89SAndroid Build Coastguard Workerdrop flowid :3 74*de1e4e89SAndroid Build Coastguard Worker# 75*de1e4e89SAndroid Build Coastguard Worker 76*de1e4e89SAndroid Build Coastguard Worker# *********************** AF42 *************************** 77*de1e4e89SAndroid Build Coastguard Worker#AF42 (DSCP 0x24) from is passed on with a tcindex value 2 78*de1e4e89SAndroid Build Coastguard Worker#if it doesnt exceed its CIR/CBS 79*de1e4e89SAndroid Build Coastguard Worker#policer 2 is used. Note that this is shared with the AF41 80*de1e4e89SAndroid Build Coastguard Worker# 81*de1e4e89SAndroid Build Coastguard Worker# 82*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \ 83*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x90 0xfc \ 84*de1e4e89SAndroid Build Coastguard Worker$meter2 \ 85*de1e4e89SAndroid Build Coastguard Workercontinue flowid :2 86*de1e4e89SAndroid Build Coastguard Worker# 87*de1e4e89SAndroid Build Coastguard Worker# if it exceeds the above but not the rule below, it gets a tcindex value 88*de1e4e89SAndroid Build Coastguard Worker# of 3 (policer 3) 89*de1e4e89SAndroid Build Coastguard Worker# 90*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 91*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x90 0xfc \ 92*de1e4e89SAndroid Build Coastguard Worker$meter3 \ 93*de1e4e89SAndroid Build Coastguard Workerdrop flowid :3 94*de1e4e89SAndroid Build Coastguard Worker# 95*de1e4e89SAndroid Build Coastguard Worker# *********************** AF43 *************************** 96*de1e4e89SAndroid Build Coastguard Worker# 97*de1e4e89SAndroid Build Coastguard Worker#AF43 (DSCP 0x26) from is passed on with a tcindex value 3 98*de1e4e89SAndroid Build Coastguard Worker#if it doesnt exceed its CIR/CBS 99*de1e4e89SAndroid Build Coastguard Worker#policer 3 is used. Note that this is shared with the AF41 and AF42 100*de1e4e89SAndroid Build Coastguard Worker# 101*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \ 102*de1e4e89SAndroid Build Coastguard Workermatch ip tos 0x98 0xfc \ 103*de1e4e89SAndroid Build Coastguard Worker$meter3 \ 104*de1e4e89SAndroid Build Coastguard Workerdrop flowid :3 105*de1e4e89SAndroid Build Coastguard Worker# 106*de1e4e89SAndroid Build Coastguard Worker# *********************** BE *************************** 107*de1e4e89SAndroid Build Coastguard Worker# 108*de1e4e89SAndroid Build Coastguard Worker# Anything else (not from the AF4*) gets discarded if it 109*de1e4e89SAndroid Build Coastguard Worker# exceeds 1Mbps and by default goes to BE if it doesnt 110*de1e4e89SAndroid Build Coastguard Worker# Note that the BE class is also used by the AF4* in the worst 111*de1e4e89SAndroid Build Coastguard Worker# case 112*de1e4e89SAndroid Build Coastguard Worker# 113*de1e4e89SAndroid Build Coastguard Worker$TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \ 114*de1e4e89SAndroid Build Coastguard Workermatch ip src 0/0\ 115*de1e4e89SAndroid Build Coastguard Worker$meter4 \ 116*de1e4e89SAndroid Build Coastguard Workerdrop flowid :4 117*de1e4e89SAndroid Build Coastguard Worker 118*de1e4e89SAndroid Build Coastguard Worker######################## Egress side ######################## 119*de1e4e89SAndroid Build Coastguard Worker 120*de1e4e89SAndroid Build Coastguard Worker# attach a dsmarker 121*de1e4e89SAndroid Build Coastguard Worker# 122*de1e4e89SAndroid Build Coastguard Worker$TC qdisc add $EGDEV handle 1:0 root dsmark indices 64 123*de1e4e89SAndroid Build Coastguard Worker# 124*de1e4e89SAndroid Build Coastguard Worker# values of the DSCP to change depending on the class 125*de1e4e89SAndroid Build Coastguard Worker#note that the ECN bits are masked out 126*de1e4e89SAndroid Build Coastguard Worker# 127*de1e4e89SAndroid Build Coastguard Worker#AF41 (0x88 is 0x22 shifted to the right by two bits) 128*de1e4e89SAndroid Build Coastguard Worker# 129*de1e4e89SAndroid Build Coastguard Worker$TC class change $EGDEV classid 1:1 dsmark mask 0x3 \ 130*de1e4e89SAndroid Build Coastguard Worker value 0x88 131*de1e4e89SAndroid Build Coastguard Worker#AF42 132*de1e4e89SAndroid Build Coastguard Worker$TC class change $EGDEV classid 1:2 dsmark mask 0x3 \ 133*de1e4e89SAndroid Build Coastguard Worker value 0x90 134*de1e4e89SAndroid Build Coastguard Worker#AF43 135*de1e4e89SAndroid Build Coastguard Worker$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ 136*de1e4e89SAndroid Build Coastguard Worker value 0x98 137*de1e4e89SAndroid Build Coastguard Worker#BE 138*de1e4e89SAndroid Build Coastguard Worker$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \ 139*de1e4e89SAndroid Build Coastguard Worker value 0x0 140*de1e4e89SAndroid Build Coastguard Worker# 141*de1e4e89SAndroid Build Coastguard Worker# 142*de1e4e89SAndroid Build Coastguard Worker# The class mapping 143*de1e4e89SAndroid Build Coastguard Worker# 144*de1e4e89SAndroid Build Coastguard Worker$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 145*de1e4e89SAndroid Build Coastguard Worker handle 1 tcindex classid 1:1 146*de1e4e89SAndroid Build Coastguard Worker$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 147*de1e4e89SAndroid Build Coastguard Worker handle 2 tcindex classid 1:2 148*de1e4e89SAndroid Build Coastguard Worker$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 149*de1e4e89SAndroid Build Coastguard Worker handle 3 tcindex classid 1:3 150*de1e4e89SAndroid Build Coastguard Worker$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \ 151*de1e4e89SAndroid Build Coastguard Worker handle 4 tcindex classid 1:4 152*de1e4e89SAndroid Build Coastguard Worker# 153*de1e4e89SAndroid Build Coastguard Worker 154*de1e4e89SAndroid Build Coastguard Worker# 155*de1e4e89SAndroid Build Coastguard Workerecho "---- qdisc parameters Ingress ----------" 156*de1e4e89SAndroid Build Coastguard Worker$TC qdisc ls dev $INDEV 157*de1e4e89SAndroid Build Coastguard Workerecho "---- Class parameters Ingress ----------" 158*de1e4e89SAndroid Build Coastguard Worker$TC class ls dev $INDEV 159*de1e4e89SAndroid Build Coastguard Workerecho "---- filter parameters Ingress ----------" 160*de1e4e89SAndroid Build Coastguard Worker$TC filter ls dev $INDEV parent ffff: 161*de1e4e89SAndroid Build Coastguard Worker 162*de1e4e89SAndroid Build Coastguard Workerecho "---- qdisc parameters Egress ----------" 163*de1e4e89SAndroid Build Coastguard Worker$TC qdisc ls $EGDEV 164*de1e4e89SAndroid Build Coastguard Workerecho "---- Class parameters Egress ----------" 165*de1e4e89SAndroid Build Coastguard Worker$TC class ls $EGDEV 166*de1e4e89SAndroid Build Coastguard Workerecho "---- filter parameters Egress ----------" 167*de1e4e89SAndroid Build Coastguard Worker$TC filter ls $EGDEV parent 1:0 168*de1e4e89SAndroid Build Coastguard Worker# 169*de1e4e89SAndroid Build Coastguard Worker#deleting the ingress qdisc 170*de1e4e89SAndroid Build Coastguard Worker#$TC qdisc del $INDEV ingress 171