path: root/extensions/
diff options
author/C=JP/ST=JP/CN=Yasuyuki Kozakai/ </C=JP/ST=JP/CN=Yasuyuki Kozakai/>2007-11-29 04:35:06 +0000
committer/C=JP/ST=JP/CN=Yasuyuki Kozakai/ </C=JP/ST=JP/CN=Yasuyuki Kozakai/>2007-11-29 04:35:06 +0000
commit5717a31f6a44e72fa178b4b25233ddace414aec3 (patch)
tree144f46582f3f32f7966270b70258596de0a638f4 /extensions/
parenta2f67f0a194c31713b209cc9f754b11e677cf3ad (diff)
Move to for ip6tables.8
Diffstat (limited to 'extensions/')
1 files changed, 35 insertions, 0 deletions
diff --git a/extensions/ b/extensions/
new file mode 100644
index 0000000..c8128ec
--- /dev/null
+++ b/extensions/
@@ -0,0 +1,35 @@
+This patch adds a new match called 'hashlimit'.
+The idea is to have something like 'limit', but either per
+destination-ip or per (destip,destport) tuple.
+It gives you the ability to express
+ '1000 packets per second for every host in'
+ '100 packets per second for every service of'
+with a single iptables rule.
+.BI "--hashlimit " "rate"
+A rate just like the limit match
+.BI "--hashlimit-burst " "num"
+Burst value, just like limit match
+.BI "--hashlimit-mode " "dstip,srcip,dstport,srcport"
+A comma-separated list of objects to take into consideration
+.BI "--hashlimit-name " "foo"
+The name for the /proc/net/ipt_hashlimit/foo entry
+.BI "--hashlimit-htable-size " "num"
+The number of buckets of the hash table
+.BI "--hashlimit-htable-max " "num"
+Maximum entries in the hash
+.BI "--hashlimit-htable-expire " "num"
+After how many miliseconds do hash entries expire
+.BI "--hashlimit-htable-gcinterval " "num"
+How many miliseconds between garbage collection intervals