netfilter: hashlimit: byte-based limit mode
authorFlorian Westphal <fw@strlen.de>
Mon, 7 May 2012 10:51:45 +0000 (10:51 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 9 May 2012 11:04:57 +0000 (13:04 +0200)
commit0197dee7d3182bb6b6a21955860dfa14fa022d84
tree121237ff7991a5fea8d8ac6202ad6c92834e744e
parent817e076f61bca3d0270af60632d1fe07cd4919f1
netfilter: hashlimit: byte-based limit mode

can be used e.g. for ingress traffic policing or
to detect when a host/port consumes more bandwidth than expected.

This is done by optionally making cost to mean
"cost per 16-byte-chunk-of-data" instead of "cost per packet".

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter/xt_hashlimit.h
net/netfilter/xt_hashlimit.c