I want to do rate limiting for one incoming interface and multiple outgoing interfaces. It becomes simple for me do rate limiting on incoming interface itself without touching outgoing interfaces. So, for downloads I can use egress rate limiting on incoming interfaces and for upload ingress rate limiting. But as ingress rate limiting will work efficiently only by using IFB, I doubt the performance as it is software mirroring of packets from eth0 to ifb0 which at high loads might introduce packet drops. So I just want to ask whether ifb will be able to handle 1gbps load assuming 64bytes packet. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
