Date: Thu, 08 Feb 2007 12:04:31 +0100 From: peter@bsdly.net (Peter N. M. Hansteen) To: freebsd-questions@freebsd.org Subject: Re: Packet rate limiter Message-ID: <877iusuczk.fsf@thingy.datadok.no> In-Reply-To: <45C99336.3010508@demax.sk> (Jan Sebosik's message of "Wed, 07 Feb 2007 09:52:06 %2B0100") References: <45C99336.3010508@demax.sk>
next in thread | previous in thread | raw e-mail | index | archive | help
Jan Sebosik <sebosik@demax.sk> writes: > is there any way how to limit packet per second [PPS] rate to specified > IP (group of IP) ? The closest I can think of off the top of my head is defining a PF rule set with queues (ALTQ), however you will be specifying bandwidth, that is in bits per second (or k,M,G multiples of) of percentage of available bandwidth, not number of packets. Your groups of source addresses could be maintained as tables for easy manipulation. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/ "First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?877iusuczk.fsf>