xref: /aosp_15_r20/external/iptables/extensions/libxt_limit.man (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge WorkerThis module matches at a limited rate using a token bucket filter.
2*a71a9546SAutomerger Merge WorkerA rule using this extension will match until this limit is reached.
3*a71a9546SAutomerger Merge WorkerIt can be used in combination with the
4*a71a9546SAutomerger Merge Worker.B LOG
5*a71a9546SAutomerger Merge Workertarget to give limited logging, for example.
6*a71a9546SAutomerger Merge Worker.PP
7*a71a9546SAutomerger Merge Workerxt_limit has no negation support - you will have to use \-m hashlimit !
8*a71a9546SAutomerger Merge Worker\-\-hashlimit \fIrate\fP in this case whilst omitting \-\-hashlimit\-mode.
9*a71a9546SAutomerger Merge Worker.TP
10*a71a9546SAutomerger Merge Worker\fB\-\-limit\fP \fIrate\fP[\fB/second\fP|\fB/minute\fP|\fB/hour\fP|\fB/day\fP]
11*a71a9546SAutomerger Merge WorkerMaximum average matching rate: specified as a number, with an optional
12*a71a9546SAutomerger Merge Worker`/second', `/minute', `/hour', or `/day' suffix; the default is
13*a71a9546SAutomerger Merge Worker3/hour.
14*a71a9546SAutomerger Merge Worker.TP
15*a71a9546SAutomerger Merge Worker\fB\-\-limit\-burst\fP \fInumber\fP
16*a71a9546SAutomerger Merge WorkerMaximum initial number of packets to match: this number gets
17*a71a9546SAutomerger Merge Workerrecharged by one every time the limit specified above is not reached,
18*a71a9546SAutomerger Merge Workerup to this number; the default is 5.
19