The IPQoS configuration file for a best-effort web server differs slightly from an IPQoS configuration file for a premium web server. This procedure uses the configuration file from Example 5, Sample Configuration for a Best-Effort Web Server.
For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.
fmt_version 1.0 action { module ipgpc name ipgpc.classify params { global_stats TRUE }
The file must begin with the partial action statement to invoke the ipgpc classifier. In addition, the action statement also has a params clause to enable statistics collection. For an explanation of this action statement, see How to Create the IPQoS Configuration File and Define Traffic Classes.
class { name userweb next_action markAF12 enable_stats FALSE }
Creates a class that is called userweb for forwarding web traffic from users.
Instructs the ipgpc module to pass packets of the userweb class to the markAF12 action statement after ipgpc completes processing. The markAF12 action statement invokes the dscpmk marker.
Enables statistics collection for the userweb class. However, because the value of enable_stats is FALSE, statistics collection for this class does not occur.
For an explanation of the class clause task, see How to Create the IPQoS Configuration File and Define Traffic Classes.
filter { name webout sport 80 direction LOCAL_OUT class userweb } }
Assigns the name webout to the filter.
Selects traffic with a source port of 80, the usual port for HTTP (web) traffic.
Further selects traffic that is outgoing from the local system.
Identifies the class to which the filter belongs, in this instance, class userweb.
For an explanation of the filter clause task, see How to Define Filters in the IPQoS Configuration File.
action { module dscpmk name markAF12
Invokes the marker module dscpmk.
Assigns the name markAF12 to the action statement.
The previously defined class userweb includes a next_action markAF12 statement. This statement sends traffic flows to the markAF12 action statement after the classifier concludes processing.
params { global_stats FALSE dscp_map{0-63:12} next_action continue } }
Enables statistics collection for the markAF12 marker action statement. However, because the value of enable_stats is FALSE, statistics collection does not occur.
Assigns a DSCP of 12 to the packet headers of the traffic class userweb, which is currently being processed by the marker.
Indicates that no further processing is required on packets of the traffic class userweb, and that these packets can return to the network stream.
The DSCP of 12 instructs the marker to set all entries in the dscp map to the decimal value 12 (binary 001100). This codepoint indicates that packets of the userweb traffic class are subject to the AF12 per-hop behavior. AF12 guarantees that all packets with the DSCP of 12 in the DS field receive a medium-drop, high-priority service.
See How to Start the ipqos Service for specific instructions about starting or restarting the service.
See General IPQoS Configuration Planning Task Map for a list of additional changes that might be needed.