Blame view

kernel/linux-imx6_3.14.28/Documentation/cgroups/net_cls.txt 1.24 KB
6b13f685e   김민수   BSP 최초 추가
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
  Network classifier cgroup
  -------------------------
  
  The Network classifier cgroup provides an interface to
  tag network packets with a class identifier (classid).
  
  The Traffic Controller (tc) can be used to assign
  different priorities to packets from different cgroups.
  Also, Netfilter (iptables) can use this tag to perform
  actions on such packets.
  
  Creating a net_cls cgroups instance creates a net_cls.classid file.
  This net_cls.classid value is initialized to 0.
  
  You can write hexadecimal values to net_cls.classid; the format for these
  values is 0xAAAABBBB; AAAA is the major handle number and BBBB
  is the minor handle number.
  Reading net_cls.classid yields a decimal result.
  
  Example:
  mkdir /sys/fs/cgroup/net_cls
  mount -t cgroup -onet_cls net_cls /sys/fs/cgroup/net_cls
  mkdir /sys/fs/cgroup/net_cls/0
  echo 0x100001 >  /sys/fs/cgroup/net_cls/0/net_cls.classid
  	- setting a 10:1 handle.
  
  cat /sys/fs/cgroup/net_cls/0/net_cls.classid
  1048577
  
  configuring tc:
  tc qdisc add dev eth0 root handle 10: htb
  
  tc class add dev eth0 parent 10: classid 10:1 htb rate 40mbit
   - creating traffic class 10:1
  
  tc filter add dev eth0 parent 10: protocol ip prio 10 handle 1: cgroup
  
  configuring iptables, basic example:
  iptables -A OUTPUT -m cgroup ! --cgroup 0x100001 -j DROP