Skip to contentSkip to conversation

ICMPv6 ratelimiting, which /proc-settings related?

DISCUSSION Peter Bieringer 3 participants 6 messages Jul 13, 2002 – Jul 16, 2002

Subsystems (2)
Networking Network drivers
lore
Share & tools
lore

Peter Bieringer

author
#0 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

extending my IPv6-howto with information about the /proc-FS I found that there is no setting for ICMPv6 rate limiting.

But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.

How can this limit be controlled? Is it the

        "/proc/sys/net/ipv4/icmp_ratelimit"

switch?

I see no reaction turning the value from 1 to 10000 and running a

              ping6 -i 0.1 ::1

TIA,
Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9L917e1eqe5WPQi0RAgXrAJ404K8wy03ZUdVFVZpOOlAeQ9OdogCgsfUD /QaVWS9anK4WPPvYEPNOFx4=
=H2fP
-----END PGP SIGNATURE-----

#1 lore raw
Quoted 8 lines · Peter Bieringer

extending my IPv6-howto with information about the /proc-FS I found that there is no setting for ICMPv6 rate limiting.

But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.

How can this limit be controlled? Is it the

        "/proc/sys/net/ipv4/icmp_ratelimit"

switch?

no, the net_ratelimit() is a generic function to limit the rate of printk()'s to prevent syslog flooding...

Quoted 2 lines

TIA,
Peter

Signature · 5 lines
Live long and prosper
- Harald Welte / [email protected]               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- 
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)
author
#2 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --On Saturday, July 13, 2002 09:49:19 PM +0200 Harald Welte

Quoted 11 lines · <[email protected]> wrote:
Quoted 8 lines

extending my IPv6-howto with information about the /proc-FS I found that there is no setting for ICMPv6 rate limiting.

But in "ipv6/icmp.c" there are some " if (net_ratelimit())" calls.

How can this limit be controlled? Is it the

        "/proc/sys/net/ipv4/icmp_ratelimit"

switch?

no, the net_ratelimit() is a generic function to limit the rate of printk()'s to prevent syslog flooding...

Ok.

Are there any plans on the IPv6 roadmap?

I've cross-post to USAGI also, perhaps they are working on such.

TIA,
Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9Mbmfe1eqe5WPQi0RAtxiAKDo6Tz75Sbq14S5By2w8jQtPJZEAQCfWuj4 O5Fg84w7EVbU8Ar9ypuDJjg=
=oP9x
-----END PGP SIGNATURE-----

#3 lore raw
In reply to Peter Bieringer

In article <17380000.1026547066@localhost> (at Sat, 13 Jul 2002 09:57:46 +0200), Peter Bieringer <[email protected]> says:

Quoted 2 lines

extending my IPv6-howto with information about the /proc-FS I found that there is no setting for ICMPv6 rate limiting.

icmpv6_xrlim_allow() controls rate limiting.

A variable named sysctl_icmpv6_time lives in net/ipv6/icmp.c, but sysctl does not exist in fact...

Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?

--yoshfuji

author
#4 lore raw

--On Monday, July 15, 2002 02:44:01 AM +0900 "YOSHIFUJI Hideaki /

Quoted 10 lines · =?iso-2022-jp?B?GyRCNUhGIzFRTEAbKEI=?=" <[email protected]> wrote:

In article <17380000.1026547066@localhost> (at Sat, 13 Jul 2002 09:57:46 +0200), Peter Bieringer <[email protected]> says:

Quoted 2 lines

extending my IPv6-howto with information about the /proc-FS I found that there is no setting for ICMPv6 rate limiting.

icmpv6_xrlim_allow() controls rate limiting.

A variable named sysctl_icmpv6_time lives in net/ipv6/icmp.c, but sysctl does not exist in fact...

Oh, I found:

# grep icmpv6_time *
icmp.c:int sysctl_icmpv6_time = 1*HZ;
icmp.c:         int tmo = sysctl_icmpv6_time;
Quoted 1 line

Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?

Is HZ completly arch independed? Afair, it was CPU depended (like grep HZ include/asm/param.h) shows.

Mho: Better name:

/proc/sys/net/ipv6/icmp/all/icmpv6_rate

I would suggest use of unit 1/s and run conversion internally. Therfore
1 -> 1/s
10 -> 10/s
100 -> 100/s
0.1 -> 1/10s

Peter

#5 lore raw

In article <14790000.1026803266@localhost> (at Tue, 16 Jul 2002 09:07:46 +0200), Peter Bieringer <[email protected]> says:

Quoted 4 lines
Quoted 1 line

Is introducing /proc/sys/net/ipv6/icmp/all/icmpv6_time reasonable?

Is HZ completly arch independed? Afair, it was CPU depended (like grep HZ include/asm/param.h) shows.

We already have proc_dointvec_jiffies().
We can use it to make that sysctl be arch independent.

Quoted 10 lines

Mho: Better name:

/proc/sys/net/ipv6/icmp/all/icmpv6_rate

I would suggest use of unit 1/s and run conversion internally. Therfore
1 -> 1/s
10 -> 10/s
100 -> 100/s
0.1 -> 1/10s

ah, ipv4 uses /proc/sys/net/ipv4/icmp_*_rate,
icmpv6_rate sounds reasonable.

--yoshfuji