| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:dpi_options:opt_priority:priority_config [2026/05/18 11:20] – [The file format of protocols and priorities list:] elena.krasnobryzh | en:dpi:dpi_options:opt_priority:priority_config [2026/05/18 11:23] (current) – [Configuring Traffic Classification] elena.krasnobryzh |
|---|
| |
| <note tip>To ensure that the ''drop'' action is applied only after TLS has been parsed and the SNI has been determined, you must add the parameter ''smartdrop = 1'' to ''fastdpi.conf''. This means that if ''drop'' is specified for a protocol, the action will be deferred until TLS has been parsed or a TLS parsing error occurs. This is a hot parameter; simply reload the configuration.</note> | <note tip>To ensure that the ''drop'' action is applied only after TLS has been parsed and the SNI has been determined, you must add the parameter ''smartdrop = 1'' to ''fastdpi.conf''. This means that if ''drop'' is specified for a protocol, the action will be deferred until TLS has been parsed or a TLS parsing error occurs. This is a hot parameter; simply reload the configuration.</note> |
| ===== To convert into an internal format: ===== | ===== Configuring Traffic Classification ===== |
| <code>cat my_dscp.txt|lst2dscp protocols.dscp</code> | 1. Create a file named **protocols.txt** containing a list of the protocol groups we want to filter out from general traffic, along with their assigned priorities (classes): |
| <note>**[SSG v13+]** in input files of the lst2dscp utility, it is now possible to add comments (#) and empty lines.</note> | <code> |
| | dns cs0 |
| | ICMP cs0 |
| | http cs0 |
| | https cs0 |
| | QUIC cs1 |
| | default cs2 |
| | bittorrent cs7 |
| | </code> |
| | where |
| | * cs0 corresponds to priority 0, class 0, respectively |
| | * cs1 corresponds to priority 1, class 1 |
| | * cs7 corresponds to priority 7, the lowest class |
| | <note important>This marking is taken into account in class-based policing rules.</note> |
| |
| To move the settings into the work directory: | 2. Convert it to the DSCP format, which fastDPI understands |
| | <code> |
| | cat protocols.txt|lst2dscp /etc/dpi/protocols.dscp |
| | </code> |
| | <note>You can add comments (#) and blank lines to the input files of the lst2dscp utility.</note> |
| | |
| | 3. Apply the settings |
| | <code> |
| | service fastdpi reload |
| | </code> |
| | |
| | |
| | When moving settings to the working directory after saving a configuration backup, you must perform a reload after the move: |
| <code>mv protocols.dscp /etc/dpi/protocols.dscp</code> | <code>mv protocols.dscp /etc/dpi/protocols.dscp</code> |
| | <note warning>Use only the mv command — it is atomic; do not use copying</note> |
| | |
| |
| <note warning>Please use mv instruction! It is an atomic one. Do not use copy!</note> | |
