2

I have seen connmark or ctinfo could work for this but couldn't find a simple effective command to make it work (Not familiar within this area).

The command can be applied to the TCP termination node or any linux node as intermediary router.

Improve this question

1 Answer 1

Reset to default
2 
iptables -t mangle -A PREROUTING -m dscp --dscp-class AF12 -j CONNMARK --set-xmark 12
iptables -t mangle -A POSTROUTING -m connmark --mark 12 -j DSCP --set-dscp-class AF12

(not 100% dynamic as the DSCP value need to be known in advance in order to get a match)

Improve this answer
1
  • I'm waiting to see when this patchset lands (in linux 5.7?) if it's possible to have a generic method using nftables instead. Commented Mar 28, 2020 at 13:53

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.