On Thu, 7 Mar 2024, at 5:10 PM, Sreedhar M wrote: > Thanks Kerin for the Info. > > The workaround is not fulfilling . The use case for me is multiple > seconds combination. > I Wanted to keep new connections, at given every 10 seconds period I > don't won't to allow more than 15 connections > > Let me explain , as I Wanted to accept new connections, at given every > 10 seconds period I don't won't to allow more than 15 connections . > > With the below rule, ex: say on a src client If I run 15 connections > in one second because of 15 packets burst the rule will accept, from > 2nd second onwards it accepts 1 each second until it reaches 10 You have to set the interval long enough for the bucket refill rate to be immaterial (1/day is the longest possible interval). The example had it as 1/hour; I do not know why you reduced it to 1/second. -- Kerin Millar