proxmox-mirrors/mirror_iproute2
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_iproute2 synced 2025-10-06 23:46:13 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

tc: flower: document that *_ip parameters take a PREFIX as an argument.

Browse Source 
* The argument to src_ip, dst_ip, enc_src_ip and enc_dst_ip take an
  optional prefix length which is used to provide a mask to limit the scope
  of matching.
* This is documented as a PREFIX in keeping with ip-route(8).

Example of uses of IPv4 and IPv6 prefixes

tc qdisc add dev eth0 ingress
tc filter add dev eth0 protocol ip parent ffff: flower \
    indev eth0 dst_ip 192.168.1.1 action drop
tc filter add dev eth0 protocol ip parent ffff: flower \
    indev eth0 src_ip 10.0.0.0/8 action drop
tc filter add dev eth0 protocol ipv6 parent ffff: flower \
    indev eth0 src_ip 2001:DB8:1::/48 action drop
tc filter add dev eth0 protocol ipv6 parent ffff: flower \
    indev eth0 dst_ip 2001:DB8::1 action drop

Signed-off-by: Simon Horman <simon.horman@netronome.com>
This commit is contained in:
Simon Horman 2016-12-16 14:54:36 +01:00 committed by Stephen Hemminger
parent 8578bb731d
commit b2a1f740aa
2 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
man/man8/tc-flower.8
View File

@ -31,8 +31,8 @@ flower \- flow based traffic control filter
.IR ETH_TYPE " } | " .IR ETH_TYPE " } | "
.BR ip_proto " { " tcp " | " udp " | " sctp " | " icmp " | " icmpv6 " | " .BR ip_proto " { " tcp " | " udp " | " sctp " | " icmp " | " icmpv6 " | "
.IR IP_PROTO " } | { " .IR IP_PROTO " } | { "
.BR dst_ip " | " src_ip " } { " .BR dst_ip " | " src_ip " } "
.IR ipv4_address " | " ipv6_address " } | { " .IR PREFIX " | { "
.BR dst_port " | " src_port " } " .BR dst_port " | " src_port " } "
.IR port_number " } | " .IR port_number " } | "
.B enc_key_id .B enc_key_id
@ -103,14 +103,14 @@ may be
.BR tcp ", " udp ", " sctp ", " icmp ", " icmpv6 .BR tcp ", " udp ", " sctp ", " icmp ", " icmpv6
or an unsigned 8bit value in hexadecimal format. or an unsigned 8bit value in hexadecimal format.
.TP .TP
.BI dst_ip " ADDRESS" .BI dst_ip " PREFIX"
.TQ .TQ
.BI src_ip " ADDRESS" .BI src_ip " PREFIX"
Match on source or destination IP address. Match on source or destination IP address.
.I ADDRESS .I PREFIX
must be a valid IPv4 or IPv6 address, depending on must be a valid IPv4 or IPv6 address, depending on the \fBprotocol\fR
.BR protocol option to tc filter, optionally followed by a slash and the prefix length.
option of tc filter. If the prefix is missing, \fBtc\fR assumes a full-length host match.
.TP .TP
.BI dst_port " NUMBER" .BI dst_port " NUMBER"
.TQ .TQ
@ -128,16 +128,16 @@ which have to be specified in beforehand.
.TP .TP
.BI enc_key_id " NUMBER" .BI enc_key_id " NUMBER"
.TQ .TQ
.BI enc_dst_ip " ADDRESS" .BI enc_dst_ip " PREFIX"
.TQ .TQ
.BI enc_src_ip " ADDRESS" .BI enc_src_ip " PREFIX"
.TQ
.BI enc_dst_port " NUMBER"
Match on IP tunnel metadata. Key id Match on IP tunnel metadata. Key id
.I NUMBER .I NUMBER
is a 32 bit tunnel key id (e.g. VNI for VXLAN tunnel). is a 32 bit tunnel key id (e.g. VNI for VXLAN tunnel).
.I ADDRESS .I PREFIX
must be a valid IPv4 or IPv6 address. Dst port must be a valid IPv4 or IPv6 address optionally followed by a slash and the
prefix length. If the prefix is missing, \fBtc\fR assumes a full-length
host match. Dst port
.I NUMBER .I NUMBER
is a 16 bit UDP dst port. is a 16 bit UDP dst port.
.SH NOTES .SH NOTES

8
tc/f_flower.c
View File

@ -48,14 +48,14 @@ static void explain(void)
" dst_mac MAC-ADDR |\n" " dst_mac MAC-ADDR |\n"
" src_mac MAC-ADDR |\n" " src_mac MAC-ADDR |\n"
" ip_proto [tcp | udp | sctp | icmp | icmpv6 | IP-PROTO ] |\n" " ip_proto [tcp | udp | sctp | icmp | icmpv6 | IP-PROTO ] |\n"
" dst_ip [ IPV4-ADDR | IPV6-ADDR ] |\n" " dst_ip PREFIX |\n"
" src_ip [ IPV4-ADDR | IPV6-ADDR ] |\n" " src_ip PREFIX |\n"
" dst_port PORT-NUMBER |\n" " dst_port PORT-NUMBER |\n"
" src_port PORT-NUMBER |\n" " src_port PORT-NUMBER |\n"
" type ICMP-TYPE |\n" " type ICMP-TYPE |\n"
" code ICMP-CODE }\n" " code ICMP-CODE }\n"
" enc_dst_ip [ IPV4-ADDR | IPV6-ADDR ] |\n" " enc_dst_ip PREFIX |\n"
" enc_src_ip [ IPV4-ADDR | IPV6-ADDR ] |\n" " enc_src_ip PREFIX |\n"
" enc_key_id [ KEY-ID ] }\n" " enc_key_id [ KEY-ID ] }\n"
" FILTERID := X:Y:Z\n" " FILTERID := X:Y:Z\n"
" ACTION-SPEC := ... look at individual actions\n" " ACTION-SPEC := ... look at individual actions\n"