List Info

Thread: Re: rate-limit
Re: rate-limit
country flaguser name
Germany		 2007-08-18 04:45:40 

  


  

    this depends on what you mean with creates more damage than help. I do not remember that i-series damage the traffic,   because those are able rate shape. you have not a great granularity, but it works. if this damage your traffic, I think your traffic will always damaged by rate limiters (as in the 200, 450s) or rate shapers. is your traffic UDP or TCP? in the case of TCP it should work well. more bad for UDP traffic. reg hvm 

Von: Iñaki Martínez Díez HOSTALIA.COM>
Gesendet: 18.08.07 01:36:17
An: extreme-nsppuck.nether.net
Betreff: [e-nsp] rate-limit

Hi,

 I need to limit a port to a bandwidth limit if possible inbound andoutbound.

 I have 3 models, summit 200 with ExtremeWare (7.6 and 7.7), X250 andx450 with ExtremeOS (12).

 In the ExtremeWare i use this:

create access-mask RATELIMIT ports precedence1000
create rate-limit <port_name> RATELIMIT port <port_number>permit limit <mbps&gt; exceed-actiondrop

 But this is no efficient and there is no real rate-limiting in theport and cause more damage than help.

&nbsp;Can anybody help me to rate-limiting a port??

&nbsp;Thanks in advance.


_______________________________________________extreme-nsp mailing listextreme-nsppuck.nether.nethttps://puck.nether.net/mailman/listinfo/extreme-nsp



In 5 Schritten zur eigenen Homepage. Jetzt Domain sichern und gestalten!  &nbsp; 
Nur 3,99 EUR/Monat! http://www.maildomain.web.de/?mc=021114&nbsp; 

  

  
  
   
     
    

  

    Re:  rate-limit
  


  

     country flaguser name
Spain		
     2007-08-18 05:22:24
  


  

    
infothecweb.de wrote:
> this depends on what you mean with creates more damage
than help. 
Well i mean than rate-limiting in the ExtremeWare cause this
(limiting
to 16 Mbps):
    1) a single connection does not go more than 300 Kbps
    2) when the port (really the server behind the port) has
an attack
(specially UDP) the traffic goes up to the limit of the port
(10 o 100 Mbps)


> is your traffic UDP or TCP?

mainly TCP.



 I need some configuration to limit bandwidth in a port and
also prevent
UDP attacks.



 Thanks.



_______________________________________________
extreme-nsp mailing list
extreme-nsppuck.nether.net

https://puck.nether.net/mailman/listinfo/extreme-nsp



  


  

    
  

  
  
   
     
    

  

    Re:  rate-limit
  


  

     country flaguser name
Sweden		
     2007-08-18 05:44:19
  


  

    
On Sat, 18 Aug 2007, Iñaki Martínez Díez wrote:

>    1) a single connection does not go more than 300
Kbps

This is classical due to the burst size being too small, so
TCP goes into 
saw-tooth mode (slow-start, quickly rises in speed, hits
rate-limiter that 
drops multiple packets, goes back into slow-start, repeat
forever).

I don't have access to any Summit200 so I don't know if the
burst size can 
be increased, but if it can you should try that.

-- 
Mikael Abrahamsson    email: swmikeswm.pp.se
_______________________________________________
extreme-nsp mailing list
extreme-nsppuck.nether.net

https://puck.nether.net/mailman/listinfo/extreme-nsp


  


  

    
  

  
  
   
     
    






 [1-3]











   
 





about | contact  Other archives ( Real Estate discussion Medical topics )