From 01bb6a550412e1f217dbe6e57e646237def98f5c Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Wed, 30 Jul 2025 18:38:17 -0400
Subject: [PATCH] set CAKE flow isolation mode to dual-dsthost

We have no use case for fairness based on source address.
---
 etc/systemd/network/0.grapheneos.network.network       | 1 +
 etc/systemd/network/0.grapheneos.org.network           | 1 +
 etc/systemd/network/0.ns1.grapheneos.org.network       | 1 +
 etc/systemd/network/0.ns2.grapheneos.org.network       | 1 +
 etc/systemd/network/1.grapheneos.network.network       | 1 +
 etc/systemd/network/1.grapheneos.org.network           | 1 +
 etc/systemd/network/1.ns1.grapheneos.org.network       | 1 +
 etc/systemd/network/1.ns2.grapheneos.org.network       | 1 +
 etc/systemd/network/2.grapheneos.network.network       | 1 +
 etc/systemd/network/2.grapheneos.org.network           | 1 +
 etc/systemd/network/2.ns1.grapheneos.org.network       | 1 +
 etc/systemd/network/2.ns2.grapheneos.org.network       | 1 +
 etc/systemd/network/3.grapheneos.network.network       | 1 +
 etc/systemd/network/3.grapheneos.org.network           | 1 +
 etc/systemd/network/3.ns1.grapheneos.org.network       | 1 +
 etc/systemd/network/attestation.app.network            | 1 +
 etc/systemd/network/discuss.grapheneos.org.network     | 1 +
 etc/systemd/network/grapheneos.social.network          | 1 +
 etc/systemd/network/mail.grapheneos.org.network        | 1 +
 etc/systemd/network/matrix.grapheneos.org.network      | 1 +
 etc/systemd/network/ns1.staging.grapheneos.org.network | 1 +
 etc/systemd/network/staging.attestation.app.network    | 1 +
 etc/systemd/network/staging.grapheneos.org.network     | 1 +
 23 files changed, 23 insertions(+)

diff --git a/etc/systemd/network/0.grapheneos.network.network b/etc/systemd/network/0.grapheneos.network.network
index d5609ff..6813c79 100644
--- a/etc/systemd/network/0.grapheneos.network.network
+++ b/etc/systemd/network/0.grapheneos.network.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/0.grapheneos.org.network b/etc/systemd/network/0.grapheneos.org.network
index 095448f..bdaca72 100644
--- a/etc/systemd/network/0.grapheneos.org.network
+++ b/etc/systemd/network/0.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/0.ns1.grapheneos.org.network b/etc/systemd/network/0.ns1.grapheneos.org.network
index 958bc55..4e49ad5 100644
--- a/etc/systemd/network/0.ns1.grapheneos.org.network
+++ b/etc/systemd/network/0.ns1.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/0.ns2.grapheneos.org.network b/etc/systemd/network/0.ns2.grapheneos.org.network
index 08563a3..d7b8d07 100644
--- a/etc/systemd/network/0.ns2.grapheneos.org.network
+++ b/etc/systemd/network/0.ns2.grapheneos.org.network
@@ -30,4 +30,5 @@ PreferredSource=2605:6400:10:102e:95bc:89ef:2e7f:49bb
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/1.grapheneos.network.network b/etc/systemd/network/1.grapheneos.network.network
index 15f6ded..21ea32e 100644
--- a/etc/systemd/network/1.grapheneos.network.network
+++ b/etc/systemd/network/1.grapheneos.network.network
@@ -27,4 +27,5 @@ PreferredSource=2605:6400:20:387:72d4:dab9:a369:f351
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/1.grapheneos.org.network b/etc/systemd/network/1.grapheneos.org.network
index be6128f..06215b2 100644
--- a/etc/systemd/network/1.grapheneos.org.network
+++ b/etc/systemd/network/1.grapheneos.org.network
@@ -27,4 +27,5 @@ PreferredSource=2605:6400:20:1131:8088:e08:84e6:632
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/1.ns1.grapheneos.org.network b/etc/systemd/network/1.ns1.grapheneos.org.network
index 2ee76c8..678be91 100644
--- a/etc/systemd/network/1.ns1.grapheneos.org.network
+++ b/etc/systemd/network/1.ns1.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/1.ns2.grapheneos.org.network b/etc/systemd/network/1.ns2.grapheneos.org.network
index 66f52aa..a1f4997 100644
--- a/etc/systemd/network/1.ns2.grapheneos.org.network
+++ b/etc/systemd/network/1.ns2.grapheneos.org.network
@@ -30,4 +30,5 @@ PreferredSource=2605:6400:20:1c8f:a0c9:372d:482e:945b
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/2.grapheneos.network.network b/etc/systemd/network/2.grapheneos.network.network
index 47dee8b..b6cee21 100644
--- a/etc/systemd/network/2.grapheneos.network.network
+++ b/etc/systemd/network/2.grapheneos.network.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/2.grapheneos.org.network b/etc/systemd/network/2.grapheneos.org.network
index 3ad60b3..fd5a8ba 100644
--- a/etc/systemd/network/2.grapheneos.org.network
+++ b/etc/systemd/network/2.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/2.ns1.grapheneos.org.network b/etc/systemd/network/2.ns1.grapheneos.org.network
index 95e229d..72ee757 100644
--- a/etc/systemd/network/2.ns1.grapheneos.org.network
+++ b/etc/systemd/network/2.ns1.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/2.ns2.grapheneos.org.network b/etc/systemd/network/2.ns2.grapheneos.org.network
index c9a38eb..fe672e7 100644
--- a/etc/systemd/network/2.ns2.grapheneos.org.network
+++ b/etc/systemd/network/2.ns2.grapheneos.org.network
@@ -30,4 +30,5 @@ PreferredSource=2605:6400:30:ec25:102c:af6d:5be:1eb8
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/3.grapheneos.network.network b/etc/systemd/network/3.grapheneos.network.network
index 08b7d90..2243b51 100644
--- a/etc/systemd/network/3.grapheneos.network.network
+++ b/etc/systemd/network/3.grapheneos.network.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/3.grapheneos.org.network b/etc/systemd/network/3.grapheneos.org.network
index 343c2f3..f9d966f 100644
--- a/etc/systemd/network/3.grapheneos.org.network
+++ b/etc/systemd/network/3.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/3.ns1.grapheneos.org.network b/etc/systemd/network/3.ns1.grapheneos.org.network
index 5d6d15b..99bd43b 100644
--- a/etc/systemd/network/3.ns1.grapheneos.org.network
+++ b/etc/systemd/network/3.ns1.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/attestation.app.network b/etc/systemd/network/attestation.app.network
index 5a53697..dea2243 100644
--- a/etc/systemd/network/attestation.app.network
+++ b/etc/systemd/network/attestation.app.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/discuss.grapheneos.org.network b/etc/systemd/network/discuss.grapheneos.org.network
index e0250f5..01c006a 100644
--- a/etc/systemd/network/discuss.grapheneos.org.network
+++ b/etc/systemd/network/discuss.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/grapheneos.social.network b/etc/systemd/network/grapheneos.social.network
index 979fb50..969ad86 100644
--- a/etc/systemd/network/grapheneos.social.network
+++ b/etc/systemd/network/grapheneos.social.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/mail.grapheneos.org.network b/etc/systemd/network/mail.grapheneos.org.network
index 3e56f6d..53c8475 100644
--- a/etc/systemd/network/mail.grapheneos.org.network
+++ b/etc/systemd/network/mail.grapheneos.org.network
@@ -27,3 +27,4 @@ PreferredSource=2607:5300:205:200::472f
 [CAKE]
 Bandwidth=500M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/matrix.grapheneos.org.network b/etc/systemd/network/matrix.grapheneos.org.network
index ea62e8a..a6ed8d8 100644
--- a/etc/systemd/network/matrix.grapheneos.org.network
+++ b/etc/systemd/network/matrix.grapheneos.org.network
@@ -21,3 +21,4 @@ UseMTU=true
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
diff --git a/etc/systemd/network/ns1.staging.grapheneos.org.network b/etc/systemd/network/ns1.staging.grapheneos.org.network
index f1bd92f..3ce856d 100644
--- a/etc/systemd/network/ns1.staging.grapheneos.org.network
+++ b/etc/systemd/network/ns1.staging.grapheneos.org.network
@@ -27,4 +27,5 @@ PreferredSource=2605:6400:10:c41:de92:c534:326a:711a
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/staging.attestation.app.network b/etc/systemd/network/staging.attestation.app.network
index abc752c..b27e44a 100644
--- a/etc/systemd/network/staging.attestation.app.network
+++ b/etc/systemd/network/staging.attestation.app.network
@@ -27,4 +27,5 @@ PreferredSource=2605:6400:10:aa9:1c0f:44d3:da15:c0ec
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false
diff --git a/etc/systemd/network/staging.grapheneos.org.network b/etc/systemd/network/staging.grapheneos.org.network
index 34d9d45..8ea7f84 100644
--- a/etc/systemd/network/staging.grapheneos.org.network
+++ b/etc/systemd/network/staging.grapheneos.org.network
@@ -27,4 +27,5 @@ PreferredSource=2605:6400:10:9d6:6d84:e183:acda:16d7
 [CAKE]
 Bandwidth=1000M
 PriorityQueueingPreset=besteffort
+FlowIsolationMode=dual-dst-host
 SplitGSO=false