[pve-devel] [PATCH common] net: improve ingress tc filter

Wolfgang Bumiller w.bumiller at proxmox.com
Tue Mar 8 15:36:24 CET 2016


Instead of doing a dummy "0 == 0" comparison with the u32
filter just use the 'basic' filter.
---
 src/PVE/Network.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/Network.pm b/src/PVE/Network.pm
index 2d6781a..ac2c168 100644
--- a/src/PVE/Network.pm
+++ b/src/PVE/Network.pm
@@ -92,7 +92,7 @@ sub setup_tc_rate_limit {
 
     run_command("/sbin/tc qdisc add dev $iface handle ffff: ingress");
     run_command("/sbin/tc filter add dev $iface parent ffff: " .
-		"protocol all prio 50 u32 match u32 0 0 " .
+		"prio 50 basic " .
 		"police rate ${rate}bps burst ${burst}b mtu 64kb " .
 		"drop flowid :1");
 
-- 
2.1.4





More information about the pve-devel mailing list