Re: Ingress tc filters with IPSec

2015-05-30 Thread jsulli...@opensourcedevel.com
> On May 30, 2015 at 4:12 PM "jsulli...@opensourcedevel.com" > wrote: > > > > > On May 30, 2015 at 2:24 AM "John A. Sullivan III" > > wrote: > > > > > > On Sat, 2015-05-30 at 01:52 -0400, John A. Sullivan III wrote: > > > Argh! yet another obstacle from my ignorance. We are attempting ingress >

Re: Ingress tc filters with IPSec

2015-05-30 Thread jsulli...@opensourcedevel.com
> On May 30, 2015 at 2:24 AM "John A. Sullivan III" > wrote: > > > On Sat, 2015-05-30 at 01:52 -0400, John A. Sullivan III wrote: > > Argh! yet another obstacle from my ignorance. We are attempting ingress > > traffic shaping using IFB interfaces on traffic coming via GRE / IPSec. > > Filters and

Re: Ingress tc filters with IPSec

2015-05-29 Thread John A. Sullivan III
On Sat, 2015-05-30 at 01:52 -0400, John A. Sullivan III wrote: > Argh! yet another obstacle from my ignorance. We are attempting ingress > traffic shaping using IFB interfaces on traffic coming via GRE / IPSec. > Filters and hash tables are working fine with plain GRE including > stripping the hea

Ingress tc filters with IPSec

2015-05-29 Thread John A. Sullivan III
Argh! yet another obstacle from my ignorance. We are attempting ingress traffic shaping using IFB interfaces on traffic coming via GRE / IPSec. Filters and hash tables are working fine with plain GRE including stripping the header. We even got the ematch filter working so that the ESP packets are