Hi everyone,
(sorry for not writing in French, I'm not quite that good at writing in it yet)

I saw here on the forum that many people that are trying to replace Orange's Livebox with a Linux router encounter one particular problem when using the ISC DHCP client:
dhclient, the default on many Ubuntu and Debian setups uses raw sockets for sending the initial DHCP request while the machine does not have an address yet. packets that are sent through those raw sockets bypass the normal IP stack, therefore cannot be classified in iptables (normally done through -j CLASSIFY --set-class 0:6) and as a consequence setting the IEEE 802.1Q PCP value (VLAN priority) is kinda hard.
But Orange's equipment insists on receiving ARP, DHCP, ICMPv6, … packets on the 832 VLAN with the priority set to 6, otherwise it won't respond.

So I though I might share my solution to that:

The solution with which I went is to simply create a dedicated "net_prio" CGroup (I called it "dhcp-orange") and launch the dhclient instances (one for IPv4, one for IPv6) in that group.
Then, the interface priority map for this group can be set to the tag all packets going out on the VLAN interface ("enp2s0.832" in my case) with classification/ skb priority of 0:6.

The skb priority of 0:6 is then simpy mapped to a VLAN priority of 6 by using the normal egress map.

Here's the snippet from my /etc/network/interfaces:

# VLAN 832 for internet traffic (incl. VoIP)
auto enp2s0.832
iface enp2s0.832 inet manual
pre-up cgcreate -g net_prio:dhcp-orange
pre-up cgset -r "net_prio.ifpriomap=enp2s0.832 6" dhcp-orange
post-up ip link set enp2s0.832 type vlan egress 5:5 6:6
post-up cgexec -g net_prio:dhcp-orange --sticky -- dhclient -4 -cf /etc/dhcp/dhclient-orange-v4.conf $IFACE
post-up cgexec -g net_prio:dhcp-orange --sticky -- dhclient -6 -cf /etc/dhcp/dhclient-orange-v6.conf -P -D LL $IFACE
pre-down dhclient -4 -r
pre-down dhclient -6 -r
vlan-raw-device enp2s0


• cgcreate creates a new CGroup
• cgset is used to do some configuration
• cgexec launches a new process in that group

all three tools can simply be installed through the cgroup-tools package on Ubuntu & Debian.

I hope this might be useful to some of you

Cheers

ah, désolé.

instead of
cgexec -g net_cls:dhcp-orange …can you try
cgexec -g net_prio:dhcp-orange …
on Ubuntu systems, both controllers are actually merged by default into one, so using "net_prio" in one place and "net_cls" in another didn't create an error for me.
lrwxrwxrwx  1 root root  16 March 19 06:48 net_cls -> net_cls,net_prio/
dr-xr-xr-x  4 root root   0 March 19 22:56 net_cls,net_prio/
lrwxrwxrwx  1 root root  16 March 19 06:48 net_prio -> net_cls,net_prio/

but this is bad style. so I fixed it in my original post.
sorry for that.

hello,

super, it works ! I removed all the iptables rules clacify and I keep the max rate

thanks for the tip !

Wrong, that depends on your area.
For example to me : this is absolutely not necessary, I send a COS-0 DHCP request, and I get a response from Orange's endpoint with no problem at all.
So, one should first try the "simple solution", then assume he lives in a "priority-6 area". It's just about luck as Orange doesn't share such information.

but to be safe, better do priority-6 even if not needed. That way if Orange changes something in your area you won't have any issue. All livebox use priority-6 whatever the area they're in.