Put heavy bandwidth users in a "slow boat" jail?

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I haven't found a good intro for this topic, so I thought I would ask here.

I run a netperf server for researchers to use to measure bandwidth as needed. It's open to the world for others to use from time to time. However, some people run a bandwidth test ever 5 minutes 24x7, abusing my server by running through my hosting company's bandwidth limit in a few days.

I have already set up some scripts with iptables rules to identify those abusers, and block them. That's working fine. But I would like to put them in a "jail" where they can only get, say 3kbps in either direction. 

I have heard that some combination of iptables or tc could do this. So here's the problem statement:

- I will create a list of IP addresses that need to be put in the jail. The list would contain 500-1500 IP addresses when it is fully populated
- I want any connection from those addresses to have their (upload or download) limited to 3 kbps.

Would someone give me a tutorial/link to materials that will help me do this? Many thanks.

Rich

PS I once again mention my revised website design for the LARTC site. You can see the site at: http://lartc.richb-hanover.com/ Its github repo is at: https://github.com/richb-hanover/lartc-redesign Its content is the same, and it should be an easy drop-in replacement



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux