NFtables and QoS in 2021

Lynx · February 8, 2023, 9:05am

Would that facilitate doing this:

in nftables? That is, setting the DSCP from the conntrack mark?

It seems already fairly simple in nftables to set conntrack mark based on the DSCP.

lynxthecat/cake-qos-simple/blob/717ea624d54ca7c41fa3eb14889c0f0d57f2f058/cake-qos-simple.nft#L90


      
                  # designate packet for cake tin: video
                  chain dscp_set_video {
                          ip dscp set cs2
                  }
          
                  # designate packet for cake tin: voice
                  chain dscp_set_voice {
                          ip dscp set cs4
                  }	
          
          	chain store-dscp-in-conntrack {
          
                          ip version 4 ct mark set (@nh,8,8 & 252) >> 2
                          ip6 version 6 ct mark set (@nh,0,16 & 4032) >> 6
                          ct mark set ct mark or 128
                  }
          }