Re: AW: AW: [LARTC] urgent question about tcng!

[Andy Furniss <andy.furniss@dsl.pipex.com>]

Thomas Mandl wrote:
> Sorry for the stupid question, but how would I rate limit connections using
> iptables?
> 

I was thinking of the patch-o-matic-ng patches connlimit and connrate, 
though I've never used either and they may or may not be expensive for 
many connections compared to perflow.

Connrate lets you mark packets if they are above limits - you could then 
drop those later in a filter table or with a TC filter/queue.

> regards
> Thomas 
> -----Ursprüngliche Nachricht-----
> Von: Andy Furniss [mailto:andy.furniss@dsl.pipex.com] 
> Gesendet: Dienstag, 03. Mai 2005 16:43
> An: Andy Furniss
> Cc: mandl.t@ikarus.at; 'LARTC'
> Betreff: Re: AW: [LARTC] urgent question about tcng!
> 
> Andy Furniss wrote:
> 
> 
>>I don't know tcng, but the reason I suggested perflow is that you want 
>>each flow to have a ceil - unless you make a class and rule to match 
>>each flow I can't see how you can do this. Also iptables could limit 
>>the number of connections - tc can't, perflow can.
> 
> 
> Forgot to say you can also use iptables to limit rate per connection.
> 
> Andy.
> 
> 

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc