ICMPv6 ratelimiting, which /proc-settings related?

ICMPv6 ratelimiting, which /proc-settings related?

[Peter Bieringer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

extending my IPv6-howto with information about the /proc-FS I found
that there is no setting for ICMPv6 rate limiting.

But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.

How can this limit be controlled? Is it the
        "/proc/sys/net/ipv4/icmp_ratelimit"
switch?

I see no reaction turning the value from 1 to 10000 and running a 
              ping6 -i 0.1 ::1


TIA,
 Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9L917e1eqe5WPQi0RAgXrAJ404K8wy03ZUdVFVZpOOlAeQ9OdogCgsfUD
/QaVWS9anK4WPPvYEPNOFx4=
=H2fP
-----END PGP SIGNATURE-----

Re: ICMPv6 ratelimiting, which /proc-settings related?

[Harald Welte]

On Sat, Jul 13, 2002 at 09:57:46AM +0200, Peter Bieringer wrote:

> extending my IPv6-howto with information about the /proc-FS I found
> that there is no setting for ICMPv6 rate limiting.
> 
> But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.
> 
> How can this limit be controlled? Is it the
>         "/proc/sys/net/ipv4/icmp_ratelimit"
> switch?

no, the net_ratelimit() is a generic function to limit the rate of
printk()'s to prevent syslog flooding...

> TIA,
>  Peter

-- 
Live long and prosper
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- 
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)

Re: ICMPv6 ratelimiting, which /proc-settings related?

[YOSHIFUJI Hideaki / 吉藤英明]

In article <17380000.1026547066@localhost> (at Sat, 13 Jul 2002 09:57:46 +0200), Peter Bieringer <pb@bieringer.de> says:

> extending my IPv6-howto with information about the /proc-FS I found
> that there is no setting for ICMPv6 rate limiting.

icmpv6_xrlim_allow() controls rate limiting.

A variable named sysctl_icmpv6_time lives in net/ipv6/icmp.c, but
sysctl does not exist in fact...

Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?

--yoshfuji

Re: ICMPv6 ratelimiting, which /proc-settings related?

[Peter Bieringer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Saturday, July 13, 2002 09:49:19 PM +0200 Harald Welte
<laforge@gnumonks.org> wrote:

>> extending my IPv6-howto with information about the /proc-FS I found
>> that there is no setting for ICMPv6 rate limiting.
>> 
>> But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.
>> 
>> How can this limit be controlled? Is it the
>>         "/proc/sys/net/ipv4/icmp_ratelimit"
>> switch?
> 
> no, the net_ratelimit() is a generic function to limit the rate of
> printk()'s to prevent syslog flooding...

Ok.

Are there any plans on the IPv6 roadmap?

I've cross-post to USAGI also, perhaps they are working on such.

TIA,
        Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9Mbmfe1eqe5WPQi0RAtxiAKDo6Tz75Sbq14S5By2w8jQtPJZEAQCfWuj4
O5Fg84w7EVbU8Ar9ypuDJjg=
=oP9x
-----END PGP SIGNATURE-----

Re: ICMPv6 ratelimiting, which /proc-settings related?

[Peter Bieringer]

--On Monday, July 15, 2002 02:44:01 AM +0900 "YOSHIFUJI Hideaki /
=?iso-2022-jp?B?GyRCNUhGIzFRTEAbKEI=?=" <yoshfuji@wide.ad.jp> wrote:

> In article <17380000.1026547066@localhost> (at Sat, 13 Jul 2002
> 09:57:46 +0200), Peter Bieringer <pb@bieringer.de> says:
> 
>> extending my IPv6-howto with information about the /proc-FS I found
>> that there is no setting for ICMPv6 rate limiting.
> 
> icmpv6_xrlim_allow() controls rate limiting.
> 
> A variable named sysctl_icmpv6_time lives in net/ipv6/icmp.c, but
> sysctl does not exist in fact...

Oh, I found:

# grep icmpv6_time *
icmp.c:int sysctl_icmpv6_time = 1*HZ;
icmp.c:         int tmo = sysctl_icmpv6_time;


> Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?

Is HZ completly arch independed? Afair, it was CPU depended (like
grep HZ include/asm/param.h) shows.

Mho: Better name:

/proc/sys/net/ipv6/icmp/all/icmpv6_rate

I would suggest use of unit 1/s and run conversion internally.
Therfore
1 -> 1/s
10 -> 10/s
100 -> 100/s
0.1 -> 1/10s

        Peter

Re: ICMPv6 ratelimiting, which /proc-settings related?

[YOSHIFUJI Hideaki / 吉藤英明]

In article <14790000.1026803266@localhost> (at Tue, 16 Jul 2002 09:07:46 +0200), Peter Bieringer <pb@bieringer.de> says:

> > Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?
> 
> Is HZ completly arch independed? Afair, it was CPU depended (like
> grep HZ include/asm/param.h) shows.

We already have proc_dointvec_jiffies().
We can use it to make that sysctl be arch independent.


> Mho: Better name:
> 
> /proc/sys/net/ipv6/icmp/all/icmpv6_rate
> 
> I would suggest use of unit 1/s and run conversion internally.
> Therfore
> 1 -> 1/s
> 10 -> 10/s
> 100 -> 100/s
> 0.1 -> 1/10s

ah, ipv4 uses /proc/sys/net/ipv4/icmp_*_rate,
icmpv6_rate sounds reasonable.

--yoshfuji