On 28 Oct 2002, Craig Knox wrote: > Hi there, > I use QoS routing and it works great except over openvpn/tun device. > > Correct me if I am wrong but I think this is because the packets are > encapsulated within a UDP packet with no regard to what the original > packets TOS field was, so once it reaches a "real" device it is just > treated as bulk even it was suppose to be for example minimum-delay. > > Is there anyway the TOS of the UDP packet could be set the match its > payload's TOS? One of the problems I can see with this is that you give some information away about the payload, mind you not much, but you are regardless. I guess if you really wanted to do this, one could modify openvpn to look at the IP headers directly inside of openvpn and get the TOS off of the packet and then use setsockopt() to set it for the outgoing packet. It might not seem pretty, but it'll work. Let me know if you want me to hack up a patch for you to do this.
Regards, Aaron