Re: [RFC PATCH 00/30] Kernel NET policy

[Daniel Borkmann]

On 07/18/2016 08:30 PM, Liang, Kan wrote:
> > On 07/18/2016 08:55 AM, kan.liang@xxxxxxxxx wrote:
[...]
> > On a higher level picture, why for example, a new cgroup in combination
> > with tc shouldn't be the ones resolving these policies on resource usage?
>
> The NET policy doesn't support cgroup yet, but it's on my todo list.
> The granularity for the device resource is per queue. The packet will be
> redirected to the specific queue.
> I'm not sure if cgroup with tc can do that.

Did you have a look at sch_mqprio, which can be used along with either
netprio cgroup or netcls cgroup plus tc on clsact's egress side to set
the priority for mqprio mappings from application side? At leats ixgbe,
i40e, fm10k have offload support for it and a number of other nics. You
could also use cls_bpf for making the prio assignment if you need to
involve also other meta data from the skb (like mark or prio derived from
sockets, etc). Maybe it doesn't cover all of what you need, but could be
a start to extend upon?

Thanks,
Daniel