Can the PF works with the DiffServ DSCP markings in the IP packets?
The idea is do the DSCP marking (classification) as close the source
traffic and when the packet through my network, the 'core' routers
only put the packets in the correct queue, based on DSCP value
(without the need of reclassification).
Can I with PF do this?
yes. "pass tos XXX", "match scrub (set-tos XXX)".
This option, 'tos XXX' can set TOS values only or can use (and match)
DSCP values too?
2009/6/4 Stuart Henderson <s...@spacehopper.org>:
see the manual, pf.conf(5).
2009/7/17 Stuart Henderson <s...@spacehopper.org>:
oh, I misread your question, I thought you were asking whether it can
only set values, or whether it can set _or_ match on the values.
whereas you were actually asking about DSCP vs TOS.
TOS and DSCP are alternative uses for the same octet of the TCP header.
DSCP is shifted 2 bits along, so you should be able to use tos/set-tos for
this if you shift the values accordingly.
e.g. for realtime; DSCP is 0x2e (46), shift it along two bits:
0x2e << 2
0x2e 46 056 0b101110
0xb8 184 0270 0b10111000
you get 0xb8 which is the value to use.