> -----邮件原件----- > 发件人: Daniel Borkmann [mailto:dan...@iogearbox.net] > 发送时间: 2018年4月17日 22:11 > 收件人: Li,Rongqing <lirongq...@baidu.com> > 抄送: netdev@vger.kernel.org; t...@kernel.org; a...@fb.com; > bra...@fb.com > 主题: Re: [PATCH][net-next] net: ip tos cgroup > > On 04/17/2018 05:36 AM, Li RongQing wrote: > > ip tos segment can be changed by setsockopt(IP_TOS), or by iptables; > > this patch creates a new method to change socket tos segment of > > processes based on cgroup > > > > The usage: > > > > 1. mount ip_tos cgroup, and setting tos value > > mount -t cgroup -o ip_tos ip_tos /cgroups/tos > > echo tos_value >/cgroups/tos/ip_tos.tos > > 2. then move processes to cgroup, or create processes in cgroup > > > > Signed-off-by: jimyan <jim...@baidu.com> > > Signed-off-by: Li RongQing <lirongq...@baidu.com> > > This functionality is already possible through the help of BPF programs > attached to cgroups, have you had a chance to look into that? >
I think this method is easier to use than BPF, and more efficient -RongQing
