pf's DSCP mark on IPv6, measured on the XGS 3300 and the XGS 136, 2026-10-24
Discovery 8 put pf's DSCP mark - OPNsense's normalization rule (Firewall: Settings: Normalization, TOS / DSCP) - into the microflows of the connections each driver makes, and the fast path writes it into every frame: measured for IPv4. An IPv6 connection with a mark was kept with the host, because the fast path's writing of an IPv6 traffic class had not been measured. It has now.
The whole page, with how it was taken and what it does not show: pf's DSCP mark on IPv6, measured on the XGS 3300 and the XGS 136, 2026-10-24.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.