[LARTC] Load-based packet dropping

[LARTC] Load-based packet dropping

[Michael T. Babcock]

Has anyone seen / considered a simple queue that would drop packets on
the basis of machine load?

I'd like to tail-drop packets from specific queues if the machine load
is very high, instead of letting them build up ...

... it might make for a good DOS-prevention method too.
-- 
Michael T. Babcock
CTO, FibreSpeed Ltd. 

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Load-based packet dropping

[Patrick McHardy]

Hi.

Michael T. Babcock wrote:
> Has anyone seen / considered a simple queue that would drop packets on
> the basis of machine load?
> 
> I'd like to tail-drop packets from specific queues if the machine load
> is very high, instead of letting them build up ...
> 
> ... it might make for a good DOS-prevention method too.

Hmm i don't think so. Queueing is done just before hardware 
transmission, so (almost) all processing has already being done at this 
point. Also since you only queue packets you're sending you could only 
protect other machines, but then you don't know their load ...

Patrick

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/