On Fri, Feb 01, 2019 at 03:58:31PM +0000, Pieter Jansen van Vuuren wrote: > Firstly this patch introduces the notion of reserved priority, as the > filter implementing ingress policing would require the highest priority. > Secondly it allows setting rate limiters while tc-offloads has been > enabled. Lastly it installs a matchall filter that matches all traffic > and then applies a police action, when configuring an ingress rate > limiter. > > An example of what to expect: > > OvS CLI: > ovs-vsctl set interface <netdev_name> ingress_policing_rate=5000 > ovs-vsctl set interface <netdev_name> ingress_policing_burst=100 > > Resulting TC filter: > filter protocol ip pref 1 matchall chain 0 > filter protocol ip pref 1 matchall chain 0 handle 0x1 > not_in_hw > action order 1: police 0x1 rate 5Mbit burst 125Kb mtu 64Kb > action drop/continue overhead 0b > ref 1 bind 1 installed 3 sec used 3 sec > Action statistics: > Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) > backlog 0b 0p requeues 0 > > MIGRATED TCP STREAM TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to > 10.0.0.200 () port 0 AF_INET : demo > Recv Send Send > Socket Socket Message Elapsed > Size Size Size Time Throughput > bytes bytes bytes secs. 10^6bits/sec > > 131072 16384 16384 60.13 4.49 > > ovs-vsctl list interface <netdev_name> > _uuid : 2ca774e8-8b95-430f-a2c2-f8f742613ab1 > admin_state : up > ... > ingress_policing_burst: 100 > ingress_policing_rate: 5000 > ... > type : "" > > Signed-off-by: Pieter Jansen van Vuuren <[email protected]> > Reviewed-by: Simon Horman <[email protected]>
Thanks Pieter, after some discussion with Or Gerlitz and others on the Switchdev community call I have pushed this change to master. Kind regards, Simon _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
