NAME<\/a> cgroup \u2212 control group based traffic control filter<\/p>\n tc filter<\/b> … cgroup<\/b> [ match<\/b> EMATCH_TREE<\/i> ] [ action<\/b> ACTION_SPEC<\/i> ]<\/p>\n This filter serves as a hint to tc<\/b> that the assigned class ID of the net_cls control group the process the packet originates from belongs to should be used for classification. Obviously, it is useful for locally generated packets only.<\/p>\n action<\/b> ACTION_SPEC<\/i><\/p>\n Apply an action from the generic actions framework on matching packets.<\/p>\n match<\/b> EMATCH_TREE<\/i><\/p>\n Match packets using the extended match infrastructure. See tc-ematch<\/b>(8) for a detailed description of the allowed syntax in EMATCH_TREE<\/i>.<\/p>\n In order to use this filter, a net_cls control group has to be created first and class as well as process ID(s) assigned to it. The following creates a net_cls cgroup named “foobar”:<\/p>\n modprobe cls_cgroup To assign a class ID to the created cgroup, a file named net_cls.classid<\/i> has to be created which contains the class ID to be assigned as a hexadecimal, 64bit wide number. The upper 32bits are reserved for the major handle, the remaining hold the minor. So a class ID of e.g. ff:be<\/b> has to be written like so: 0xff00be<\/b> (leading zeroes may be omitted). To continue the above example, the following assigns class ID 1:2 to foobar cgroup:<\/p>\n echo 0x10002 > \/sys\/fs\/cgroup\/net_cls\/foobar\/net_cls.classid<\/p>\n Finally some PIDs can be assigned to the given cgroup:<\/p>\n echo 1234 > \/sys\/fs\/cgroup\/net_cls\/foobar\/tasks
SYNOPSIS<\/a>
DESCRIPTION<\/a>
OPTIONS<\/a>
EXAMPLES<\/a>
SEE ALSO<\/a> <\/p>\n
\nNAME <\/a> <\/h2>\n
SYNOPSIS <\/a> <\/h2>\n
DESCRIPTION <\/a> <\/h2>\n
OPTIONS <\/a> <\/h2>\n
EXAMPLES <\/a> <\/h2>\n
mkdir \/sys\/fs\/cgroup\/net_cls
mount -t cgroup -onet_cls net_cls \/sys\/fs\/cgroup\/net_cls
mkdir \/sys\/fs\/cgroup\/net_cls\/foobar<\/p>\n
echo 5678 > \/sys\/fs\/cgroup\/net_cls\/foobar\/tasks<\/p>\n