Ultimate SQM settings: Layer_cake + DSCP marks

[warchief]

@dlakelan

hisham2630:

instead of second name space is it possible to create a bridge between eth0.2 and veth0 without set any ip(keep them layer 2), then set veth1 as wan interface, then is it possible to tag packets ?

I set a test up on an old TP-link WDR-3600 I have lying around.
with ip-full and kmod-veth and all that installed, I used this script to create veth pair:

ip link add type veth
ip link set veth0 up
ip link set veth1 up

I then went to luci and created a new interface "prewan", I made it a bridge between eth0.2 and veth0, then I moved WAN to be physically connected to veth1.

I then put SQM instance on egress only on veth0 and veth1. The veth0 rate was "download" rate of actual wan, and the veth1 rate was "upload" rate of actual wan.

and IT WORKED just fine.

EDIT: obviously you want to fiddle around with the iptables rules for tagging with DSCP, and perhaps it requires you to do use bridge netfilter to ensure the iptables are called when the prewan bridge receives packets. But it's a very cool idea. @moeller0 might be interested.

@dlakelan

lezz:

Could I just put another SQM on wifi?

Well you could but it won't necessarily work so well, the issue is that you need to keep the total download below your 22Mbps or whatever it is. To do that you can do the following:

1. create a veth0 - veth1 pair (requires you to install the veth packages on your router and maybe the full "ip" suite)
2. put veth1 into your br-lan bridge
3. alter your routing table so that all packets coming in on WAN get forwarded via veth0, which will send them down a virtual wire to veth1 and inject them into the bridge where they'll get distributed between wired and wireless
4. place your layer_cake SQM on the veth0 device uplink/egress

You can create the veth pair as follows in your firewall.user script (untested)

ip link add type veth
ip link set up veth0
ip link set up veth1
ip link set veth1 master br-lan

then you'll need to add a static route so that all packets coming in WAN destined for LAN are sent to veth0 rather than br-lan, and put an SQM on veth0

note that this is a little tricky, you could lose your connection to your router if you route to veth0 and it's not properly got veth1 in the bridge or something like that. Save your config backup before you try this stuff, and be prepared to revert via failsafe.

I will follow the second set of instructions setting up a veth pair. The first set I almost bricked my router lol.....

EDIT:
When layer_cake is enabled on pppoe-wan egress, eth0.1(lan) ingress my bufferbloat on both links stays under 10

When I:
add veth1 to br-lan
layer_cake egress veth0, layer_cake ingress veth1
apply these rules

iptables -A FORWARD -i eth1.2 -o veth0 -j ACCEPT
iptables -A FORWARD -s -i eth1.2 -d br-lan -o veth0 -j ACCEPT

my bufferbloat stays above 25 for download
my bufferbloat stays at 15 for upload

Have I done the setup correctly?