[squid-users] Squid marking QOS and matching marks with linux iptables problem !

[Amos Jeffries]

On 24/05/20 12:17 pm, Ahmad Alzaeem wrote:
> Tested on both OS below :
> 
> Centos 7.7  64 bits  & Centos 6.10
> 
> 
> Same result , squid is not marking traffic .
> 
> Is there a way to run squid into debug mode and debug to see if its
> making DSCP or not ?


'mark' are Netfilter MARK values within the local TCP stack. Accessed
with Netfilter conntrack.

'tos' is what sets DSCP values on packets between machines.


DSCP values should remain 0x0 in the config you showed unless you have
iptables rules converting MARK into TOS values.


You can set "debug_options 33,5 17,5 50,5" to see what squid is doing.


Amos