Hello all,

It appears that, for some reason I have thus far failed to understand when you use marking in iptables you then run into troubles if you attempt to do NAT (MAQUERADE).

Let me describe this in more detail.

We are attempting to use a network test environment named ATCD running it on a CentOS VM under VirtualBox. For more into on ATCD see:

https://github.com/facebook/augmented-traffic-control

The networking inside the VirtualBox environment is private so at some point before you get out of it you've got to have a NAT router - not necessarily on the same VM where the ATCD runs - which also is a router.

Be that as it may, ATCD uses a combination of iptables marking and tc to degrade/control network transmission quality in accordance with your settings. And it seems to work just fine up until you reach the NATing router - at which point the transmission drops to very slow if not non-existent.

An old article here makes a passing reference to a conflict between iptables marking and MASQ (NAT):

http://tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.netfilter.html

Unfortunately, the link to another text supposedly detailing how to deal with this is dead.

Has anybody encountered this? Any tips on how to fix this issue?

Thanks.

Boris.