Assigning priorities according to the protocols [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • ODT export
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_options:opt_priority:priority_config [2024/09/26 15:29] – внешнее изменение 127.0.0.1en:dpi:dpi_options:opt_priority:priority_config [2026/05/18 11:23] (current) – [Configuring Traffic Classification] elena.krasnobryzh
    Line 26: Line 26:
       * default - means "for all remaining protocols" and allows to simplify significantly making the configuration file.   * default - means "for all remaining protocols" and allows to simplify significantly making the configuration file.
      
    -===== To convert into an internal format: ===== +<note tip>To ensure that the ''drop'' action is applied only after TLS has been parsed and the SNI has been determined, you must add the parameter ''smartdrop = 1'' to ''fastdpi.conf''. This means that if ''drop'' is specified for a protocol, the action will be deferred until TLS has been parsed or a TLS parsing error occurs. This is a hot parameter; simply reload the configuration.</note> 
    -<code>cat my_dscp.txt|lst2dscp protocols.dscp</code> +===== Configuring Traffic Classification ===== 
    -<note>**[SSG v13+]** in input files of the lst2dscp utility, it is now possible to add comments (#) and empty lines.</note>+1. Create a file named **protocols.txt** containing a list of the protocol groups we want to filter out from general traffic, along with their assigned priorities (classes): 
     +<code> 
     +dns cs0 
     +ICMP cs0 
     +http cs0 
     +https cs0 
     +QUIC cs1 
     +default cs2 
     +bittorrent cs7 
     +</code> 
     +where  
     +  * cs0 corresponds to priority 0, class 0, respectively  
     +  * cs1 corresponds to priority 1, class 1 
     +  * cs7 corresponds to priority 7, the lowest class 
     +<note important>This marking is taken into account in class-based policing rules.</note> 
      
    -To move the settings into the work directory:+2. Convert it to the DSCP format, which fastDPI understands 
     +<code> 
     +cat protocols.txt|lst2dscp /etc/dpi/protocols.dscp 
     +</code> 
     +<note>You can add comments (#) and blank lines to the input files of the lst2dscp utility.</note> 
     + 
     +3. Apply the settings 
     +<code> 
     +service fastdpi reload 
     +</code> 
     + 
     + 
     +When moving settings to the working directory after saving a configuration backup, you must perform a reload after the move:
     <code>mv protocols.dscp  /etc/dpi/protocols.dscp</code> <code>mv protocols.dscp  /etc/dpi/protocols.dscp</code>
     +<note warning>Use only the mv command — it is atomic; do not use copying</note>
     +
      
    -<note warning>Please use mv instruction! It is an atomic one. Do not use copy!</note>