Hi to all, I'm trying to build an Haproxy Load Balancer with FireHOL/FireQOS to make traffic shaping. The goal is to profile different websites under different profiles (Haproxy job) that have different outgoing Bandwidth limitation (FireHOL/FIreQOS job). I was able to do it using the http-request set-tos option of haproxy and all is working like a charm letting the FireQOS to match the TOS value that haproxy set on packets and classify the traffic in the correct bandwidth profiles. The problem is that I prefer to do it using the http-request set-mark option of haproxy that set the mark and not the TOS value. This because usign marks is more flexible and all remain internal to the server without expose changes on packets going out from the server itself that may be treated in special ways from borders routers. The problem is that seems FireQOS is not matching the mark that Haproxy set on packets leaving all the traffic in the default class. FireHOL/FireQOS are using marks on ip packets by themselves and this can conflict with the mark that haproxy is setting on the packet itself. Is possible to know which mask haproxy is setting (if one is set) with the set-mark option? Or,may be better, add a mask parameter to the set-mark option to specify the mask that have to be used from the haproxy when it set the mark? Thank you Regards Marcello
