Regrading ovs and rate limiting


New Member
Aug 31, 2023
We tried to rate limit the vf_rep interface using the match all filter by using tc command.We have used the following command for this purpose:
(sudo tc filter add dev <interface_name> parent ffff: protocol all prio 1 matchall action police rate 1mbit burst 9000).However, during our testing, we noticed an unexpected behavior. When we executed the above command and subsequently performed a tcpdump on the interface that resides in the OVS bridge, we observed that the matchall destroy function was being called.

In an attempt to troubleshoot this issue, we also tried rate limiting using the OVS command as follows:
ovs-vsctl set interface <interface_name> ingress_policing_rate=1000
Interestingly, with this approach, we did not encounter the same observation of the matchall destroy function being called.
To gain more insights into this matter, we placed dump stack traces to trace the callback and found that this call is originating from the Vswitchd when using the tcpdump. We have attached the relevant dmesg log for your reference.
Could you kindly provide any insights or suggestions regarding this


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!