Date: Wed, 30 Apr 2014 08:45:12 -0700 From: Freddie Cash <fjwcash@gmail.com> To: bycn82 <bycn82@gmail.com> Cc: "freebsd-ipfw@freebsd.org" <freebsd-ipfw@freebsd.org> Subject: Re: feature of `packet per second` Message-ID: <CAOjFWZ4zRUmcjG-r--OqoGEWcSZoWhtTykgAAHzCjoEWsMVS9g@mail.gmail.com> In-Reply-To: <53611738.8010103@gmail.com> References: <5360F1F4.9060808@gmail.com> <5361105C.1040203@freebsd.org> <53611738.8010103@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 30, 2014 at 8:31 AM, bycn82 <bycn82@gmail.com> wrote: > On 4/30/14 23:01, Julian Elischer wrote: > >> On 4/30/14, 8:52 PM, bycn82 wrote: >> >>> Hi >>> >>> `packet per second` it is easy to be implemented using iptables, there >>> is a module named `recent`, but in using ipfw, Do we have any solution = to >>> fulfill it? check the link below >>> https://forums.freebsd.org/viewtopic.php?f=3D44&t=3D42933&p=3D258441#p2= 58441 >>> >> >> since I don't use linux.. what is "packet per second"?.. does it report >> it or set a limit on it? >> >>> >>> bycn82 >>> >>> _______________________________________________ >>> freebsd-ipfw@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >>> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >>> >>> >>> >> >> Yes, "Packets Per Second"means limit a connection based on the packets > number, for example, If I allow 2 ICMP packets come to my server in each > individual second. only the first 2 packets will be allow, all others in > the same second will be dropped. > =E2=80=8BFor ICMP, specifically, there's a sysctl to control the rate (per = second): # sysctl -d =E2=80=8Bnet.inet.icmp.icmplim net.inet.icmp.icmplim: Maximum number of ICMP responses per second For everything else, you'd want to use dummynet(4). --=20 Freddie Cash fjwcash@gmail.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOjFWZ4zRUmcjG-r--OqoGEWcSZoWhtTykgAAHzCjoEWsMVS9g>