<div dir="ltr">Hi Wolfgang.<div>Firstly let me say that I have never been a fan of QoS. So I'm slightly biased against the whole thing in the first place.</div><div><br></div><div>But regarding your comment "It’s not easy for the network to guess the requirements of an application," I would disagree. Traffic classification and setting of DSCP values is something that edge routers have been capable of for decades. I would even argue that this is the place you *want* to do it, rather than trusting what the application itself says it wants.</div><div><br></div><div>If you must do the whole QoS thing at all, use something like a policy-map (other manufacturers are available), match all port 53, set DSCP to an appropriate value for *your* network and prioritise/police as appropriate in the core.</div><div><br></div><div>Cheers, Greg</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 29 Feb 2024 at 09:00, Wolfgang Riedel via bind-users <<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>Hi Folks,<div><br></div><div>OK let me help you a bit as it’s really essential for DNS traffic which need to be go through in all situations!!!</div><div><br></div><div>Within the OS networking stack as also within the network there is always a prioritisation of packets within the queues to serialise the packets of an application to go on the wire. This prioritisation is being done based on DSCP within a L3 domain and on COS when in a L2 domain.</div><div><br></div><div>It’s not easy for the network to guess the requirements of an application, therefore best case the application is setting the DSCP itself and the network is just trusting the DSCP or if smart enough the checking and in case of violation doing reclassification.</div><div><br></div><div>In my case it’s<span style="color:rgb(64,64,64);white-space:pre-wrap;background-color:rgb(255,255,255)"> dscp </span><span style="white-space:pre-wrap;background-color:rgb(255,255,255);color:rgb(63,151,223)">24</span> in named.conf options but the value may be different based on deployment scenarios and therefore needs to be a configureable option.</div><div><br></div><div>If you don't set it, it will default to 0 and all other traffic will get higher priority. Saying if you do an ftp download with large frames, your DNS request which will be running in parallel will not be making it through and either get delayed or typically drooped.</div><div><br></div><div>Maybe have a look at the following classification scheme:</div><div><br></div><div><div style="display:block"><div style="display:inline-block" role="link"><a style="border-radius:10px;font-family:-apple-system,Helvetica,Arial,sans-serif;display:block;width:300px;overflow:hidden;text-decoration:none" rel="nofollow" href="https://www.f1-consult.com/qos/rfc4594/" dir="ltr" role="button" width="300" target="_blank"><table style="table-layout:fixed;border-collapse:collapse;width:300px;background-color:rgb(229,230,233);font-family:-apple-system,Helvetica,Arial,sans-serif" cellpadding="0" cellspacing="0" border="0" width="300"><tbody><tr><td align="center"><img style="width: 300px; height: 159px;" width="300" height="159" alt="640px-IETF_Logo.svg.png" src="cid:ii_18df42fc1b9d8c2fa3a1"></td></tr><tr><td><table bgcolor="#E5E6E9" cellpadding="0" cellspacing="0" width="300" style="font-family:-apple-system,Helvetica,Arial,sans-serif;table-layout:fixed;background-color:rgb(229,230,233)"><tbody><tr><td style="padding:8px 0px"><div style="max-width:100%;margin:0px 16px;overflow:hidden"><div style="font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://www.f1-consult.com/qos/rfc4594/" style="text-decoration:none" target="_blank"><font color="#272727" style="color:rgba(0,0,0,0.847)">RFC 4594-Based 12-Class QoS Model</font></a></div><div style="font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left"><a rel="nofollow" href="https://www.f1-consult.com/qos/rfc4594/" style="text-decoration:none" target="_blank"><font color="#808080" style="color:rgba(0,0,0,0.498)">f1-consult.com</font></a></div></div></td></tr></tbody></table></td></tr></tbody></table></a></div></div></div><div><br id="m_-8321620401105897230m_5475632769487741597lineBreakAtBeginningOfMessage"><div>
<span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">—</span><br style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">Hope that helps,</span><br style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">Wolfgang</span><br style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">_____________________________________</span><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">_____________________________________</span><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">____________________</span><br style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">Wolfgang Riedel | Distinguished</span><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline"> </span><span style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0);float:none;display:inline">Engineer | CCIE #13804 | VCP #42559</span><br style="font-family:Consolas;font-size:11px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><br></div>
<div><br><blockquote type="cite"><div>On 28. Feb 2024, at 22:01, Petr Menšík <<a href="mailto:pemensik@redhat.com" target="_blank">pemensik@redhat.com</a>> wrote:</div><br><div><div>We may want to help fixing DSCP features, but I personally do not know any usage, where this feature would be used and what for exactly. Recent bind9 uses libuv to back its network core, instead of custom networking core maintained by ISC. But I haven't found any trace of DSCP support at libuv docs [1]. I haven't found a way to set at least type of service on UDP [2].<br><br>I think that would be the first place to support DSCP values for connections or sockets. Then, once libuv can use it, its support could be added back into named.<br><br>It would help though if you were more verbose about why iptables cannot replace it and what is use-case, when it is useful. Without simple alternatives present. If you would describe it, it might motivate more people to work on DSCP support. I haven't seen important reason, why it needs to be done by the daemon itself. Perhaps we can find alternative way to set DSCP tags for you, if you are more verbose about how you use it?<br><br>Regards,<br>Petr<br><br>1. <a href="https://docs.libuv.org/en/v1.x/search.html?q=dscp&check_keywords=yes&area=default" target="_blank">https://docs.libuv.org/en/v1.x/search.html?q=dscp&check_keywords=yes&area=default</a><br>2. <a href="https://docs.libuv.org/en/v1.x/udp.html" target="_blank">https://docs.libuv.org/en/v1.x/udp.html</a><br><br>On 28. 02. 24 13:50, Balazs Hinel (Nokia) via bind-users wrote:<br><blockquote type="cite">Hi,<br>I am working on a product in Nokia, and we currently use BIND provided by Rocky Linux 8 with security patches. Recently the requirement came that we should upgrade to at least 9.16. During the testing of this version we realized that a feature we used, DSCP, has stopped working. Reading about the topic, we found the article about it non-operational in 9.16, and removal in 9.18.<br> We also saw the email on this mailing list, stating that "so far, nobody has noticed" it is missing. Well, we noticed it just now, and I would like to state that our product and most probably other telecom equipments using BIND would miss it greatly. As I read in that mail, there was an alternative plan which would re-implement this functionality. If it is feasible, please consider doing it. The alternative options, e.g. setting it via iptables cannot work in our use-case.<br> Best regards,<br>Balazs Hinel<br></blockquote><br>-- <br>Petr Menšík<br>Software Engineer, RHEL<br>Red Hat, <a href="http://www.redhat.com/" target="_blank">http://www.redhat.com/</a><br>PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB<br><br>-- <br>Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br><br>ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" target="_blank">https://www.isc.org/contact/</a> for more information.<br><br><br>bind-users mailing list<br><a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></div></div></blockquote></div><br></div></div>-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>