Linux Advanced Routing and Traffic Control list
 help / color / mirror / Atom feed
From: nuclearcat@nuclearcat.com
To: lartc@vger.kernel.org
Subject: Re[2]: [LARTC] Limit number of connections
Date: Tue, 23 Sep 2003 05:51:16 +0000	[thread overview]
Message-ID: <marc-lartc-106429647722473@msgid-missing> (raw)

Hello Rio,

Tuesday, September 23, 2003, 5:42:03 AM, you wrote:

Or you can use patch-o-matic connlimit + MARK.
"
This adds CONFIG_IP_NF_MATCH_CONNLIMIT match allows you to restrict the
number of parallel TCP connections to a server per client IP address
(or address block).

Examples:

# allow 2 telnet connections per client host
iptables -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT
"

But i am not sure, it is perfomant solution.

RM> On Monday 22 September 2003 21:21, Mihai Vlad wrote:
>> Hello again,
>> I have a router/nat linux box. I managed to create some HTB classes and
>> everything is OK.
>> When perople are usig download managers like FlashGet and DAP (multiple
>> connection ones), the ceil limiting works okay,
>> but the rate parameter is somehow useles... The guaranteed bandwidth is
>> never reached.
>> So what can I do to limit the number of connections/computer?
>> I want to make sure that they do not use more than one connection for
>> the download manager.
>> Thanks in advance

RM> Actually this is not Bandwidth Limiter task,
RM> this is could be handled by your proxy, like Squid. Check the configuration 
RM> and enable maxconn ACL for file types: .exe .tar.gz .zip .iso .. etc ..

RM> - Rio.Martin -

RM> _______________________________________________
RM> LARTC mailing list / LARTC@mailman.ds9a.nl
RM> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/



-- 
Best regards,
 Denis                            mailto:admin@ams-sat.com

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

                 reply	other threads:[~2003-09-23  5:51 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-106429647722473@msgid-missing \
    --to=nuclearcat@nuclearcat.com \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox