1.5 Rolling DSCP-MARKING

General questions
1

New to this routing platform so please bear with me if I’m missing something obvious, but I’m having a difficult time implementing a DSCP-based qos traffic policy. I’m deploying on a Proxmox server and using Virtio Paravirtualized interfaces and I’ve followed this official config guide as well as this example with no luck. The DSCP Markings are not present in any packet captures and obviously not the packets are not being shaped when processed upstream. As far as I’ve seen, there is no “show policy-map interface x” equivalent either where I can see how the interface is processing the traffic. If anyone can offer any guidance or advice, I would appreciate if they can share with me. Thank you.

set qos policy shaper RTSP_TRAFFIC class 10 match 10 ip destination address 10.4.255.1

set qos policy shaper RTSP_TRAFFIC class 10 set-dscp ‘CS4’

set qos policy shaper RTSP_TRAFFIC default bandwidth 10%

set interfaces ethernet eth2 description ‘WAN’

set qos interface eth2 egress ‘RTSP_TRAFFIC_TRAFFIC’

2

I guess commands translate into traffic-control statements, so try “tc show” commands on eth2

3

I usually use a policy route to mark dscp values.

set policy route SET_DSCP63 interface 'eth2'
set policy route SET_DSCP63 rule 10 set dscp '63'

You can then see hit counters for that policy using:

vyos@vyos# sudo nft list chain ip vyos_mangle VYOS_PBR_PREROUTING
table ip vyos_mangle {
        chain VYOS_PBR_PREROUTING {
                type filter hook prerouting priority mangle; policy accept;
                iifname "eth2" counter packets 8 bytes 773 jump VYOS_PBR_UD_SET_DSCP63
        }
}

Or look at the full table:

vyos@vyos# sudo nft list table ip vyos_mangle
table ip vyos_mangle {
        chain VYOS_PBR_PREROUTING {
                type filter hook prerouting priority mangle; policy accept;
                iifname "eth2" counter packets 284 bytes 24566 jump VYOS_PBR_UD_SET_DSCP63
        }

        chain VYOS_PBR_POSTROUTING {
                type filter hook postrouting priority mangle; policy accept;
        }

        chain VYOS_PBR_UD_SET_DSCP63 {
                counter packets 284 bytes 24566 ip dscp set 0x3f return comment "ipv4-route-SET_DSCP63-10"
        }
}