background image

Page 7 | AlliedWare™ OS How To Note: Hardware Filters

Combining hardware filters and QoS

Combining hardware filters and QoS

The switch compares the packet with every hardware filter before it compares the packet 
with any QoS flow group. If the packet matches a hardware filter, the switch takes the action 
specified by that hardware filter and stops the comparison process. If a packet matches both 
a hardware filter and a QoS flow group, the packet only gets matched against the hardware 
filter. It bypasses the QoS process. 

If the hardware filter actions include 

discard

, then this is not a problem, because the packet 

was never going to get into the QoS system anyway (given that it was being discarded). But, if 
the hardware filter actions include 

forward

, and the packet would also be matched by a QoS 

flow group, then this is a problem. The packet will not be matched by the QoS flow group, so 
the switch will not apply any intended QoS-based filtering, metering, queue redirection, etc 
to the packet. Instead the switch will forward the packet as if it belongs to the default traffic 
class for the port’s QoS policy. 

For this reason, we only recommend combining hardware filters and QoS if all your hardware 
filters result in traffic being dropped. For traffic that you want forwarded with QoS control, 
use QoS for both the filtering and the QoS functionality. Of course, you can also use QoS 
flow groups to drop traffic.

How many filters can you create?

The total number of filters that can be created is not an exact number, but depends on which 
fields the various filters are matching on. So, to understand how to work out whether the set 
of filters you are creating might run out of space, it is necessary to understand the way in 
which the filters operate in the switch hardware.

There are two items within the switch hardware which set limits on the number of filters that 
can be created: the filter rules table and the profile (mask).

Hardware filters and QoS share the same filter rules table and mask.

1

. The filter rules table

One item that sets a limit on the number of filters is the table that contains the list of filter 
rules. This has a strict limit of 

1

024 entries. Entries get made when:

z

You create a hardware filter.

z

You use QoS to apply a classifier to a port.

Содержание AT-9900 Series

Страница 1: ...he throughput of the switch It is possible to configure over 1000 different filters and still have complete wire speed throughput on the switch The following configuration methods are available 1 To f...

Страница 2: ...en combining QoS and hardware filters 8 2 The profile mask 9 Are there enough bytes for your set of filters 10 Some protocols also use filters so use some of the length 11 How to see the current filte...

Страница 3: ...B DIAg NLSp IPXwan ipxsocketnum ANY TCPSport portid port range ANY TCPDport portid port range ANY UDPSport portid port range ANY UDPDport portid port range ANY L4SMask mask L4DMask mask L5BYTE01 byteo...

Страница 4: ...ote see page 13 Note The default value of each mask is FFFF This means that if you specify a port number without specifying a mask then the classifier matches only that one value of the port number Th...

Страница 5: ...hey will all be treated like core ports if at least one of the ports is a core port Creating hardware filters Once you have created a classifier create a filter The filter uses the classifier and spec...

Страница 6: ...matches the packets in the stream and specify copy discard for the action setl2qos Note that this action has the other parameters associated with it as the following syntax shows add switch hwfilter f...

Страница 7: ...cket as if it belongs to the default traffic class for the port s QoS policy For this reason we only recommend combining hardware filters and QoS if all your hardware filters result in traffic being d...

Страница 8: ...an be configured on different ports So the rules for allocating packet to flow groups can differ from port to port Hence QoS can result in the rule table containing different sets of rules for differe...

Страница 9: ...filters that can be created Also the protocols that use filters see page 11 create at least one entry each 2 The profile mask The other item that affects the number of filters you can create is called...

Страница 10: ...already matches on those fields If you next make a hardware filter that matches on source UDP port this also does not add any length to the mask because it shares the same 2 bytes as the source TCP po...

Страница 11: ...n IP address destination TCP UDP port 6 6 1 4 2 19 bytes Some protocols also use filters so use some of the length The following protocols use filters and therefore use up some of the available profil...

Страница 12: ...one block on the base system for packets arriving in via any other port z one block allocated on the IPv6 accelerator Number of rules per application MLD Snooping 4 Accel Card IPv6 1 Switch HwFilter 2...

Страница 13: ...they are both 1 then the result is 1 otherwise the result is 0 Let s look at some examples Profile 1 IPv4 bytes used 3 of 16 Other Eth bytes used 5 of 16 Profile used to match on packets z Number of b...

Страница 14: ...choose the number of the ports as 4 power of 2 to simplify the example Before going into the complex examples there are some points to remember for the L4 mask calculation z if the beginning port is...

Страница 15: ...drop Example 3 ports 333 777 A more complex situation let s try to write the classifiers for UDP ports between 333 777 As we are trying to get rid of odd numbers in the beginning of our port range we...

Страница 16: ...ed 2 x 2 blocks one at the start classifier 2 and one at the end classifier 8 256 384 383 511 Port range Number of ports Command 333 334 335 336 351 352 383 384 511 512 767 768 775 776 777 1 2 16 32 1...

Страница 17: ...12288 24576 49152 4096 8192 16384 32768 65536 5120 10240 20480 40960 6144 12288 24576 49152 7168 14336 28672 57344 8192 16384 32768 65536 9216 18432 36864 10240 20480 40960 11264 22528 45056 12288 245...

Страница 18: ...ts reserved Information in this document is subject to change without notice All company names logos and product designs that are trademarks or registered trademarks are the property of their respecti...

Отзывы: