TC-CONNMARK(8)

๐Ÿ’– TC-CONNMARK(8) ๐Ÿ’–

okay bestie, this is the manual page for the connmark retriever action in tc(8). it's giving netfilter magic โœจ


๐ŸŒธ NAME ๐ŸŒธ

connmark - netfilter connmark retriever action

๐ŸŽ€ SYNOPSIS ๐ŸŽ€

tc ... action connmark [ zone u16_zone_index ] [ CONTROL ] [ index
        u32_index ]

CONTROL := { reclassify | pipe | drop | continue | ok }

๐Ÿฆ‹ DESCRIPTION ๐Ÿฆ‹

okay so the connmark action basically takes the connection's mark value and restores it into the packet's fwmark. no cap, it's a whole glow-up for your packets ๐Ÿซถ

๐Ÿ‘‘ OPTIONS ๐Ÿ‘‘

  • zone u16_zone_index โ€” this one lets you pick the conntrack zone when you're doing conntrack lookups for packets. u16_zone_index is a 16bit unsigned decimal value, so keep it in that range ๐Ÿ“
  • CONTROL โ€” this is how the packet keeps going after the action runs. literally the plot twist section ๐Ÿ’…
    • reclassify โ€” restarts classification by jumping back to the first filter attached to this action's parent. full rewind energy โช
    • pipe โ€” continues with the next action. this is the default, so if you don't pick anything, this is what happens ๐Ÿ’œ
    • drop / shot โ€” the packet gets dropped and no further actions run. bye bye packet ๐Ÿ’€
    • continue โ€” continues classification with the next filter in line โœจ
    • pass โ€” returns to the calling qdisc for packet processing. this ends the classification process, so it's the end of the road ๐ŸŒˆ
  • index u32_index โ€” gives this action an index so you can identify it in later commands. u32_index is a 32bit unsigned decimal value. it's your action's name tag ๐Ÿงš

๐ŸŒˆ SEE ALSO ๐ŸŒˆ

  • tc(8), obviously ๐Ÿซถ

okay that's the whole tea ๐Ÿ’… iproute2 ยท 11 Jan 2016, slay forever periodt ๐ŸŒธ๐Ÿ’–

๐Ÿ“ฆ where this page comes from