On Wed, Aug 05, 2015 at 12:43:54PM +0200, Patrick McHardy wrote: > On 05.08, Pablo Neira Ayuso wrote: > > This patch adds a new NFTA_LIMIT_TYPE netlink attribute to indicate the type of > > limiting. > > > > Contrary to per-packet limiting, the cost is calculated from the packet path > > since this depends on the packet length. > > > > The burst attribute indicates the number of bytes in which the rate can be > > exceeded. > > Thanks Pablo, I appreciate this rework. Just a suggestion, I'd propose to > use NFT_LIMIT_PKT_LENGTH instead of LIMIT_BYTES. I expect we might want to > add other limit types like connection rates etc in the future. Thanks Patrick. I'll rename this to a mixture of both: PKT_BYTES :) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html