Re: iptables limit --limit limitations

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Saturday 2008-05-17 09:20, Payam Chychi wrote:

>Hi,
>
>Has anyone experienced any limitations when implementing the "limit
>--limit $value/sec"  ? I can only get 1000 packets/sec with a value of
>1000 or 10000  with a burst of 5. Ive been able to increase the
>packets to almost 7500 packers/sec when using a value of 10000 with a
>burst of 20.
>
>Ive also tried increasing the HZ for High res timer on the kernel to
>1000 and enabled dynamic ticks (thanks to kuzin)
>any thoughts or ideas on this? I would greatly appreciate any feedback...


It is known that the algorithm in limit and hashlimit are not quite 
accurate. Though, we seem to be out of solutions, too.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux