11:27 p.m.
Added attribute dscp to below supported protocols table in nwfilter docs.
IPV4 (ip)
TCP/UDP/SCTP (tcp/udp/sctp)
ICMP (icmp)
IGMP,ESP,AH,UDPLITE,'ALL' (igmp,esp,ah,udplite,all)
TCP/UDP/SCTP over IPV6 (tcp-ipv6,udp-ipv6,sctp-ipv6)
ICMPV6 (icmpv6)
IGMP,ESP,AH,UDPLITE,'ALL' over IPv6
(igmp-ipv6,esp-ipv6,ah-ipv6,udplite-ipv6,all-ipv6)
Here is a simple example:
[root@localhost ~]# virsh nwfilter-dumpxml myself
<filter name='myself' chain='root'>
<uuid>7192ef51-cd50-4f14-ad7b-fa5c69ea19e3</uuid>
<rule action='accept' direction='in' priority='500'>
<ip dscp='1'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<tcp dscp='1'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<tcp-ipv6 dscp='2'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<icmp dscp='55'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<icmpv6 dscp='55'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<udp dscp='3'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<udp-ipv6 dscp='4'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<udplite dscp='5'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<udplite-ipv6 dscp='6'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<esp dscp='7'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<esp-ipv6 dscp='8'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<ah dscp='9'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<ah-ipv6 dscp='10'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<sctp dscp='11'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<sctp-ipv6 dscp='55'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<igmp dscp='55'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<all-ipv6 dscp='55'/>
</rule>
<rule action='accept' direction='in' priority='500'>
<all dscp='55'/>
</rule>
</filter>
---
docs/formatnwfilter.html.in | 35 +++++++++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
diff --git a/docs/formatnwfilter.html.in b/docs/formatnwfilter.html.in
index 7169fa9..46b0bfa 100644
--- a/docs/formatnwfilter.html.in
+++ b/docs/formatnwfilter.html.in
@@ -1101,6 +1101,11 @@
<td>End of range of valid destination ports; requires
<code>protocol</code></td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1284,6 +1289,11 @@
<td>End of range of valid destination ports</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1399,6 +1409,11 @@
<td>ICMP code</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1498,6 +1513,11 @@
<td>End of range of destination IP address</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1604,6 +1624,11 @@
<td>End of range of valid destination ports</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1705,6 +1730,11 @@
<td>ICMPv6 code</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
@@ -1789,6 +1819,11 @@
<td>End of range of destination IP address</td>
</tr>
<tr>
+ <td>dscp</td>
+ <td>UINT8 (0x0-0x3f, 0 - 63)</td>
+ <td>codepoint within the DS field in the IP header</td>
+ </tr>
+ <tr>
<td>comment <span class="since">(Since
0.8.5)</span></td>
<td>STRING</td>
<td>text with max. 256 characters</td>
--
1.8.3.1