Rate Limiting Per-Socket

[Luigi Rizzo]

On Tue, Jun 22, 2004 at 08:39:48PM -0700, Paul Querna wrote:
> Hello,
> 	I am looking at methods to rate limit a single socket to a specific
> pipe or rate with FreeBSD.  I would like to make an Apache module that
> could do its outgoing rate limit *in* kernel, making the module very
> simple, and more accurate by using the kernel todo the rate limiting.
> 
> I have been looking at Dummynet and pfil_hooks, but these seem to
> operate only on an entire interface.  I would like to have these operate

this is not true -- you can do what you want trivially with dummynet,
which lets you limit the bandwidth per-flow
by using masks on pipes, and you can aggregate flow as you need
using masks appropriately on addresses and ports.
Read the ipfw manpage.

What you might not like is that you need root privs to configure
ipfw/dummynet, but that's another story...

cheers
luigi

> only on a socket fd that I designate.  Ie a special setsockopt() would
> put socket x into pipe a.  This pipe 'a' was setup ahead of time to only
> allow 512 kb/s.
> 
> Is this possible with FreeBSD?  Do you have any suggestions on the best
> way to proceed?
> 
> Thank you, 
> -Paul Querna
> 
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"