1#! /bin/sh -x
2#
3# sample script on using the ingress capabilities using u32 classifier
4# This script tags tcindex based on metering on the ingress 
5# interface the result is used for fast classification and re-marking
6# on the egress interface
7# This is an example of a color aware mode marker with PIR configured
8# based on draft-wahjak-mcm-00.txt (section 3.1)
9#
10# The colors are defined using the Diffserv Fields
11#path to various utilities;
12#change to reflect yours.
13#
14IPROUTE=/usr/src/iproute2-current
15TC=$IPROUTE/tc/tc
16IP=$IPROUTE/ip/ip
17INDEV=eth0
18EGDEV="dev eth1"
19CIR1=1500kbit
20CIR2=1000kbit
21
22#The CBS is about 60 MTU sized packets
23CBS1=90k
24CBS2=90k
25
26############################################################ 
27#
28# install the ingress qdisc on the ingress interface
29$TC qdisc add dev $INDEV handle ffff: ingress
30############################################################ 
31#
32# Create u32 filters 
33$TC filter add dev $INDEV parent ffff: protocol ip prio 4 handle 1: u32 \
34divisor 1
35############################################################ 
36
37# The meters: Note that we have shared meters in this case as identified
38# by the index parameter
39meter1=" police index 1 rate $CIR1 burst $CBS1 "
40meter2=" police index 2 rate $CIR2 burst $CBS1 "
41meter3=" police index 3 rate $CIR2 burst $CBS2 "
42meter4=" police index 4 rate $CIR1 burst $CBS2 "
43meter5=" police index 5 rate $CIR1 burst $CBS2 "
44
45# All packets are marked with a tcindex value which is used on the egress
46# tcindex 1 maps to AF41, 2->AF42, 3->AF43, 4->BE
47
48# *********************** AF41 *************************** 
49#AF41 (DSCP 0x22) is passed on with a tcindex value 1
50#if it doesnt exceed its CIR/CBS 
51#policer 1  is used.
52#
53$TC filter add dev $INDEV parent ffff: protocol ip prio 4 u32 \
54match ip tos 0x88 0xfc \
55$meter1 \
56continue flowid :1
57#
58# if it exceeds the above but not the extra rate/burst below, it gets a 
59# tcindex value  of 2
60# policer 2 is used
61#
62$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \
63match ip tos 0x88 0xfc \
64$meter2 \
65continue flowid :2
66#
67# if it exceeds the above but not the rule below, it gets a tcindex value
68# of 3 (policer 3)
69#
70$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \
71match ip tos 0x88 0xfc \
72$meter3 \
73drop flowid :3
74#
75
76# *********************** AF42 *************************** 
77#AF42 (DSCP 0x24) from is passed on with a tcindex value 2
78#if it doesnt exceed its CIR/CBS 
79#policer 2 is used. Note that this is shared with the AF41
80#
81#
82$TC filter add dev $INDEV parent ffff: protocol ip prio 5 u32 \
83match ip tos 0x90 0xfc \
84$meter2 \
85continue flowid :2
86#
87# if it exceeds the above but not the rule below, it gets a tcindex value
88# of 3 (policer 3)
89#
90$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \
91match ip tos 0x90 0xfc \
92$meter3 \
93drop flowid :3
94#
95# *********************** AF43 *************************** 
96#
97#AF43 (DSCP 0x26) from is passed on with a tcindex value 3
98#if it doesnt exceed its CIR/CBS
99#policer 3 is used. Note that this is shared with the AF41 and AF42
100#
101$TC filter add dev $INDEV parent ffff: protocol ip prio 6 u32 \
102match ip tos 0x98 0xfc \
103$meter3 \
104drop flowid :3
105#
106# *********************** BE *************************** 
107#
108# Anything else (not from the AF4*) gets discarded if it 
109# exceeds 1Mbps and by default goes to BE if it doesnt
110# Note that the BE class is also used by the AF4* in the worst
111# case
112#
113$TC filter add dev $INDEV parent ffff: protocol ip prio 7 u32 \
114match ip src 0/0\
115$meter4 \
116drop flowid :4
117
118######################## Egress side ########################
119
120# attach a dsmarker
121#
122$TC qdisc add $EGDEV handle 1:0 root dsmark indices 64
123#
124# values of the DSCP to change depending on the class
125#note that the ECN bits are masked out
126#
127#AF41 (0x88 is 0x22 shifted to the right by two bits)
128#
129$TC class change $EGDEV classid 1:1 dsmark mask 0x3 \
130       value 0x88
131#AF42
132$TC class change $EGDEV classid 1:2 dsmark mask 0x3 \
133       value 0x90
134#AF43
135$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \
136       value 0x98
137#BE
138$TC class change $EGDEV classid 1:3 dsmark mask 0x3 \
139       value 0x0
140#
141#
142# The class mapping
143#
144$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \
145          handle 1 tcindex classid 1:1
146$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \
147          handle 2 tcindex  classid 1:2
148$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \
149          handle 3 tcindex  classid 1:3
150$TC filter add $EGDEV parent 1:0 protocol ip prio 1 \
151          handle 4 tcindex  classid 1:4
152#
153
154#
155echo "---- qdisc parameters Ingress  ----------"
156$TC qdisc ls dev $INDEV
157echo "---- Class parameters Ingress  ----------"
158$TC class ls dev $INDEV
159echo "---- filter parameters Ingress ----------"
160$TC filter ls dev $INDEV parent ffff:
161
162echo "---- qdisc parameters Egress  ----------"
163$TC qdisc ls $EGDEV
164echo "---- Class parameters Egress  ----------"
165$TC class ls $EGDEV
166echo "---- filter parameters Egress ----------"
167$TC filter ls $EGDEV parent 1:0
168#
169#deleting the ingress qdisc
170#$TC qdisc del $INDEV ingress
171