nftables: Increase blackhole threshold.
This commit is contained in:
parent
40fa44dcc2
commit
87fcad3add
1 changed files with 2 additions and 2 deletions
|
@ -40,10 +40,10 @@ table inet filter {
|
||||||
# Prevent DDoS
|
# Prevent DDoS
|
||||||
# Rate limiting
|
# Rate limiting
|
||||||
meta nfproto ipv4 meter ratelimit4 \
|
meta nfproto ipv4 meter ratelimit4 \
|
||||||
{ ip saddr limit rate over 50/second burst 10 packets } \
|
{ ip saddr limit rate over 75/second burst 15 packets } \
|
||||||
add @blackhole_ipv4 { ip saddr }
|
add @blackhole_ipv4 { ip saddr }
|
||||||
meta nfproto ipv6 meter ratelimit6 \
|
meta nfproto ipv6 meter ratelimit6 \
|
||||||
{ ip6 saddr limit rate over 50/second burst 10 packets } \
|
{ ip6 saddr limit rate over 75/second burst 15 packets } \
|
||||||
add @blackhole_ipv6 { ip6 saddr }
|
add @blackhole_ipv6 { ip6 saddr }
|
||||||
# Max concurrent connections
|
# Max concurrent connections
|
||||||
meta nfproto ipv4 meter connlimit4 \
|
meta nfproto ipv4 meter connlimit4 \
|
||||||
|
|
Loading…
Reference in a new issue