iptables hashlimit behaviour

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I am new to iptables and currently working on hashlimit option.
Recently, I found a behaviour of iptables which is quite strange. When I
issue the following command :

iptables -A I_UDP_def_realm_4000 -m hashlimit --hashlimit-upto 6000
--hashlimit-burst 40 --hashlimit-mode srcip --hashlimit-name test -j
I_SYS_RATELIMIT_CHAIN

it take limit as 10000/s instead of 6000/s and this behaviour is for any
value greater than 5000. 

Also I have some observations like if I give 2000/s or 2500/s, it takes
the value as such but if I give 3000/s, it takes the value as 3333/s.
And any value above it, it takes it as 5000/s.

Please explain why iptables is behaving like this. Is it in algorithm
and the purpose for the same.

Thanks,
Gurpreet
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux