INSTALL: -------- KERNEL: -patch kernel, compile (It is assumed you know how to do this). In the kernel config, under networking options/QoS make sure you select "Classifier Actions". This will expose "generic Actions", "iptables Actions" and "Policing Actions". " generic Actions" will give you standard generic actions capability. "iptables Actions" will give you ability to use iptables targets as actions. You need to have iptables installed already. "Policing Actions" allows you to use the new and old format of policing syntax. If you only select "Traffic policing (needed for in/egress)" you get to use only the old syntax from tc. - Make sure you select U32 classifier under TC classifier in kernel config. Any other classifier would not understand the new action code (and tc is not capable of sending it commands as such). i.e old classifiers behave as in the old way. - Also dont forget to enable what you need in iptables/netfilter if you plan to use iptables targets. -compile kernel IPROUTE2: -patch iproute2; It is assumed you know how to do this (example editing the Makefile) - Edit Config file and make sure TC_CONFIG_CLS_ACTION to "y" - make sure tc/Makefile entry for IPT_INCL points to your iptables include directory if you want - compile. MISC: -- I would strongly not recommend using this new features with iptables concurently until refcounting is added for iptables. - I tested against 2418 and Greg Davis has tested agains 2.4.20. - tested against iproute2-2.4.7-now-ss020116-try.tar.gz -tested against iptables 1.2.4; future revisions may work; just too lazy at this point (and low priority) - Try the examples in the file README -If it doesnt work for you for some setup; let me know.