path: root/include/statement.h
diff options
authorPablo Neira Ayuso <>2015-12-09 22:55:30 +0100
committerPablo Neira Ayuso <>2016-01-14 18:54:39 +0100
commit3f5ef7d63f9ef70855dedd9b5aa7eba2f63a1ec7 (patch)
treef4defb46c5fd28345ebb21c0c3828e1eb0cd23b4 /include/statement.h
parent510e800e72e177a9070129b63fa232f065f54c02 (diff)
src: support limit rate over value
So far it was only possible to match packet under a rate limit, this patch allows you to explicitly indicate if you want to match packets that goes over or until the rate limit, eg. ... limit rate over 3/second counter log prefix "OVERLIMIT: " drop ... limit rate over 3 mbytes/second counter log prefix "OVERLIMIT: " drop ... ct state invalid limit rate until 1/second counter log prefix "INVALID: " When listing rate limit until, this shows: ... ct state invalid limit rate 1/second counter log prefix "INVALID: " thus, the existing syntax is still valid (i.e. default to rate limit until). Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'include/statement.h')
1 files changed, 1 insertions, 0 deletions
diff --git a/include/statement.h b/include/statement.h
index 53620aec..6be3a240 100644
--- a/include/statement.h
+++ b/include/statement.h
@@ -61,6 +61,7 @@ struct limit_stmt {
uint64_t unit;
enum nft_limit_type type;
uint32_t burst;
+ uint32_t flags;
extern struct stmt *limit_stmt_alloc(const struct location *loc);