I'm trying to troubleshoot an issue I'm having related to IFB Mirroring which I'm attempting to deploy based on this question: Tc: ingress policing and ifb mirroring

My theory is that since the ingress traffic is being redirected to/via ifb to be controlled by egress rules, I should be able to limit the ingress bandwidth via a combination tc and of Linux Control Groups net_cls controller, which can tag packets with a classid.

However its not working. I'm theorizing that since the packets start off from ingress, they aren't being tagged even though they end up being treated as egress. However, the only way I can think to test this is by actually looking at the packet and seeing if the class is there.

Not sure how to do this. I'm thinking possibly tcpdump can but don't know the relevant flags.

If anyone has any ideas about my larger problem I'd appreciate those as well!


Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.