TC-CONNMARK(8)
๐ TC-CONNMARK(8) ๐
okay bestie, this is the manual page for the connmark retriever action in tc(8). it's giving netfilter magic โจ
๐ธ NAME ๐ธ
connmark - netfilter connmark retriever action
๐ SYNOPSIS ๐
tc ... action connmark [ zone u16_zone_index ] [ CONTROL ] [ index
u32_index ]
CONTROL := { reclassify | pipe | drop | continue | ok }
๐ฆ DESCRIPTION ๐ฆ
okay so the connmark action basically takes the connection's mark value and restores it into the packet's fwmark. no cap, it's a whole glow-up for your packets ๐ซถ
๐ OPTIONS ๐
zone u16_zone_indexโ this one lets you pick the conntrack zone when you're doing conntrack lookups for packets. u16_zone_index is a 16bit unsigned decimal value, so keep it in that range ๐CONTROLโ this is how the packet keeps going after the action runs. literally the plot twist section ๐reclassifyโ restarts classification by jumping back to the first filter attached to this action's parent. full rewind energy โชpipeโ continues with the next action. this is the default, so if you don't pick anything, this is what happens ๐drop/shotโ the packet gets dropped and no further actions run. bye bye packet ๐continueโ continues classification with the next filter in line โจpassโ returns to the calling qdisc for packet processing. this ends the classification process, so it's the end of the road ๐
index u32_indexโ gives this action an index so you can identify it in later commands. u32_index is a 32bit unsigned decimal value. it's your action's name tag ๐ง
๐ SEE ALSO ๐
tc(8), obviously ๐ซถ
okay that's the whole tea ๐ iproute2 ยท 11 Jan 2016, slay forever periodt ๐ธ๐
๐ฆ where this page comes from
- alpine 3.22: iproute2-doc 6.15.0-r0 ยท GPL-2.0-or-later
- alpine 3.23: iproute2-doc 6.17.0-r0 ยท GPL-2.0-or-later
- alpine 3.24: iproute2-doc 7.0.0-r0 ยท GPL-2.0-or-later
- arch rolling: iproute2 7.2.0-1
- arch rolling: iproute2 7.3.0-1 ยท GPL-2.0-or-later
- centos-stream 10: iproute-tc 7.0.0-2.el10 ยท GPL-2.0-or-later
- centos-stream 9: iproute-tc 6.17.0-3.el9 ยท GPL-2.0-or-later
- debian bookworm: iproute2 6.1.0-3 ยท GPL-2.0-only
- debian trixie: iproute2 6.15.0-1 ยท GPL-2.0-only
- fedora 43: iproute-tc 6.14.0-2.fc43 ยท GPL-2.0-or-later
- fedora 44: iproute-tc 6.17.0-2.fc44 ยท GPL-2.0-or-later
- nixos 26.05: iproute2 7.0.0
- nixpkgs unstable: iproute2 7.2.0
- opensuse-leap 16.0: iproute2 6.12-160000.4.1 ยท GPL-2.0-only
- opensuse-leap 16.0: iproute2 6.12-160000.4.1 ยท GPL-2.0-only
- opensuse-leap 16.0: iproute2 6.12-160000.4.1 ยท GPL-2.0-only
- opensuse-leap 16.0: iproute2 6.12-160000.4.1 ยท GPL-2.0-only
- ubuntu jammy: iproute2 5.15.0-1ubuntu2 ยท GPL-2.0-only
- ubuntu jammy: iproute2 5.15.0-1ubuntu2.2 ยท GPL-2.0-only
- ubuntu noble: iproute2 6.1.0-1ubuntu6 ยท GPL-2.0-only
- ubuntu noble: iproute2 6.1.0-1ubuntu6.4 ยท GPL-2.0-only
- ubuntu questing: iproute2 6.16.0-1ubuntu2
- ubuntu questing: iproute2 6.16.0-1ubuntu2.1 ยท GPL-2.0-only
- ubuntu questing: iproute2 6.16.0-1ubuntu2.2
- ubuntu resolute: iproute2 6.19.0-1ubuntu1 ยท GPL-2.0-only
- ubuntu resolute: iproute2 6.19.0-1ubuntu1.1 ยท GPL-2.0-only
- ubuntu stonking: iproute2 7.2.0-1ubuntu1 ยท GPL-2.0-only
- ๐ girlified by anthropic/claude-haiku-5.5 on : a language model's rewrite of the original, under its terms