[ovs-discuss] IPv6 rate limiting
blp at nicira.com
Thu Oct 13 10:27:47 PDT 2011
On Thu, Oct 13, 2011 at 03:42:01PM +0100, Mike Bursell wrote:
> I've also done some further looking around, and it turns out that
> official site (http://lartc.org/) suggests that IPv6 is not
> supported for rate limiting, the site is very out of date, and it
> should, in fact, be possible (see
> http://tcn.hypert.net/tcmanual.pdf, for example). I'm guessing that
> adding a second command, along the lines of
> #define POLICE_CONFIG_CMD_IP6 "/sbin/tc filter add dev %s parent ffff: protocol ip6 prio 51 u32 match ip6 src 00::00/0 police rate %dkbit burst %dk mtu 65535 drop flowid :1"
> ...might work, as long as both were applied (note that I've changed
> the priority). Has anyone tried this, or are there other missing
> pieces, such as how the packets are marked, that are likely to cause
> problems? I'm willing to accept that there's much deeper work to be
> done - I've only just started scratching the surface this afternoon,
> and am very far from being a tc guru.
I don't know, but if you test it and it turns out to be effective,
please let us know and we'll toss it in for the next version.
More information about the discuss