Open main menu

OpenVZ Virtuozzo Containers Wiki β

Changes

Traffic shaping with tc

316 bytes added, 13:10, 16 June 2006
no edit summary
tc filter add dev $DEV parent 1: protocol ip prio 20 u32 match u32 1 0x0000 police rate 2kbit buffer 10k drop flowid :1
</pre>
 
== Limiting packages per second rate from VE ==
To prevent dos atacks from the VE you can limit packages per second rate using iptables.
<pre>
DEV=eth0
iptables -I FORWARD 1 -o $DEV -s X.X.X.X -m limit --limit 200/sec -j ACCEPT
iptables -I FORWARD 2 -o $DEV -s X.X.X.X -j DROP
</pre>
X.X.X.X is an IP address of VE
== External links ==
172
edits