iptables limit issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,

I am running a bridged mode firewall with eth0 == external and eth1==
internal. I am trying to limit the traffic per packet per second
coming in through eth0 to rate limit down before it hits my eth1
interface. The issue is that I cannot get more than 1000 packets/sec.
I was wondering if anyone has come across this issue and if so, any
solutions?
when using the limit feature the maximum rate i can set is 10,000/sec,
however this only allows roughly around 1100 pkts/sec to pass through
the interface.
I've spent some time looking at the kernel xt_limit.c and playing with
" #define MAX_CPJ (0xFFFFFFFF / (HZ*60*60*24)) ".

thanks in advance,
Payam
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux