net/sched: add skbprio scheduler
Subsystems (3)
PATCH v2 1/1 net/sched: add skbprio scheduler
net/sched: add skbprio scheduler
Skbprio (SKB Priority Queue) is a queuing discipline that prioritizes IPv4 and IPv6 packets according to their skb->priority field. Although Skbprio can be employed in any scenario in which a higher skb->priority field means a higher priority packet, Skbprio was concieved as a solution for denial-of-service defenses that need to route packets with different priorities.
v2:
*Use skb->priority field rather than DS field. Rename queueing discipline as SKB Priority Queue (previously Gatekeeper Priority Queue).
*Queueing discipline is made classful to expose Skbprio's internal priority queues.
Signed-off-by Nishanth Devarajan <[email protected]>
Reviewed-by Sachin Paryani <[email protected]>
Reviewed-by Cody Doucette <[email protected]>
Reviewed-by Michel Machado <[email protected]>
--- include/uapi/linux/pkt_sched.h | 15 ++ net/sched/Kconfig | 13 ++ net/sched/Makefile | 1 + net/sched/sch_skbprio.c | 347 +++++++++++++++++++++++++++++++++++++++++ 4 files changed, 376 insertions(+) create mode 100644 net/sched/sch_skbprio.c
include/uapi/linux/pkt_sched.h +15 -0
@@ -124,6 +124,21 @@ struct tc_fifo_qopt {__u32 limit;/* Queue length: bytes for bfifo, packets for pfifo */ }; +/* SKBPRIO section */ + +/* +* Priorities go from zero to (SKBPRIO_MAX_PRIORITY - 1). +* SKBPRIO_MAX_PRIORITY should be at least 64 in order for skbprio to be able +* to map one to one the DS field of IPV4 and IPV6 headers. +* Memory allocation grows linearly with SKBPRIO_MAX_PRIORITY. +*/ + +#define SKBPRIO_MAX_PRIORITY 64 + +struct tc_skbprio_qopt { +__u32 limit;/* Queue length in packets. */ +}; +/* PRIO section */ #define TCQ_PRIO_BANDS 16
net/sched/Kconfig +13 -0
@@ -240,6 +240,19 @@ config NET_SCH_MQPRIO If unsure, say N. +config NET_SCH_SKBPRIO + tristate "SKB priority queue scheduler (SKBPRIO)" + help + Say Y here if you want to use the SKB priority queue + scheduler. This schedules packets according to skb->priority, + which is useful for request packets in DoS mitigation systems such + as Gatekeeper. + + To compile this driver as a module, choose M here: the module will + be called sch_skbprio. + + If unsure, say N. + config NET_SCH_CHOKE tristate "CHOose and Keep responsive flow scheduler (CHOKE)" help
net/sched/Makefile +1 -0
@@ -46,6 +46,7 @@ obj-$(CONFIG_NET_SCH_NETEM) += sch_netem.o obj-$(CONFIG_NET_SCH_DRR) += sch_drr.o obj-$(CONFIG_NET_SCH_PLUG) += sch_plug.o obj-$(CONFIG_NET_SCH_MQPRIO) += sch_mqprio.o +obj-$(CONFIG_NET_SCH_SKBPRIO) += sch_skbprio.o obj-$(CONFIG_NET_SCH_CHOKE) += sch_choke.o obj-$(CONFIG_NET_SCH_QFQ) += sch_qfq.o obj-$(CONFIG_NET_SCH_CODEL) += sch_codel.o
net/sched/sch_skbprio.c new file +347 -0
347 lines not on this page · raw message
Signature · 1 line
1.9.1