[Openstack] [NEUTRON][DHCP] iptables chain rate limit dhcp connection

Gary Kotton gkotton at vmware.com
Fri Dec 30 19:00:14 UTC 2016


https://github.com/openstack/vmware-nsx

On 12/30/16, 6:36 PM, "Davide Panarese" <dpanarese at enter.eu> wrote:

    Hello everyone,
    anyone know where is the source code of neutron that create seguent CHAIN in iptables into dhcp namespaces?
    
    -A INPUT -p udp -m udp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_UDP -j DROP
    -A INPUT -p tcp -m tcp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_TCP -j DROP
    
    Thanks a lot
    
    Davide
    _______________________________________________
    Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
    Post to     : openstack at lists.openstack.org
    Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
    



More information about the Openstack mailing list