And another - sorry! - some stats/info overlimits counts the number of packets that have had their DSCP overwritten/restored/set requeues counts the number of times the ’statemask’ bit has been SET.
root@Router:~# tc -s filter show dev eth0 filter parent cacf: protocol all pref 10 u32 chain 0 filter parent cacf: protocol all pref 10 u32 chain 0 fh 800: ht divisor 1 filter parent cacf: protocol all pref 10 u32 chain 0 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 not_in_hw match 00000000/00000000 at 0 action order 1: conndscp zone 0 pipe index 1 ref 1 bind 1 mask 0xfc000000 statemask 0x01000000 mode both installed 218013 sec used 0 sec Action statistics: Sent 1048008900 bytes 7586620 pkt (dropped 0, overlimits 5263898 requeues 87634) backlog 0b 0p requeues 87634 So the above shows that 5263898 packets had their DSCP values set based on a stored DSCP value and thus avoided going through the iptables rules. 87634 packets set that stored value. root@Router:~# tc -s filter show dev eth0 ingress filter parent ffff: protocol all pref 10 u32 chain 0 filter parent ffff: protocol all pref 10 u32 chain 0 fh 800: ht divisor 1 filter parent ffff: protocol all pref 10 u32 chain 0 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 not_in_hw match 00000000/00000000 at 0 action order 1: conndscp zone 0 pipe index 2 ref 1 bind 1 mask 0xfc000000 statemask 0x01000000 mode set installed 218027 sec used 0 sec Action statistics: Sent 7942289574 bytes 9601486 pkt (dropped 0, overlimits 6153697 requeues 0) backlog 0b 0p requeues 0 action order 2: mirred (Egress Redirect to device ifb4eth0) stolen index 1 ref 1 bind 1 installed 218027 sec used 0 sec Action statistics: Sent 7942289574 bytes 9601486 pkt (dropped 0, overlimits 0 requeues 0) backlog 0b 0p requeues 0 The above shows that 6153697 packets had their DSCP values restored from the stored mark value. Note DSCPs are only restored if they’re actually different from the current stored value, so a default DSCP of 0 on an egress path is unlikely to generate a whole load of unnecessary DSCP overwriting on the ingress path. Does any of this help? Kevin > On 20 Mar 2019, at 09:06, Kevin Darbyshire-Bryant > <ke...@darbyshire-bryant.me.uk> wrote: > > Addendum: If not obvious. There are two separate instances of ‘conndscp’, > one on the egress path (in ‘both’ mode) and one on the ingress path (in ’set’ > mode) > > Cheers, > > Kevin D-B > > gpg: 012C ACB2 28C6 C53E 9775 9123 B3A2 389B 9DE2 334A > > _______________________________________________ > Cake mailing list > Cake@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/cake Cheers, Kevin D-B gpg: 012C ACB2 28C6 C53E 9775 9123 B3A2 389B 9DE2 334A _______________________________________________ Cake mailing list Cake@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cake