projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8bdf362) | patch
netfilter: nft_limit: add per-byte limiting
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 5 Aug 2015 10:38:44 +0000 (12:38 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 7 Aug 2015 09:50:50 +0000 (11:50 +0200)
commitd2168e849ebf617b2b7feae44c0c0baf739cb610
tree7bc6f8c3bab6d1669af7ac6263a606d2b17499fatree | snapshot (tar.gz zip)
parent8bdf3626425520e9bc55996d5d46f60e12dd3ad7commit | diff
netfilter: nft_limit: add per-byte limiting

This patch adds a new NFTA_LIMIT_TYPE netlink attribute to indicate the type of
limiting.

Contrary to per-packet limiting, the cost is calculated from the packet path
since this depends on the packet length.

The burst attribute indicates the number of bytes in which the rate can be
exceeded.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h diff | blob | blame | history
net/netfilter/nft_limit.c diff | blob | blame | history