RE: [nsp] rate-limit and acl

From: Jorma Mellin (jorma.mellin@teliafi.net)
Date: Mon Aug 21 2000 - 07:34:35 EDT


>Further to my query in rate-limit performance impact, I'd like to know
>whether every acl entry will be rate-limited individually according to the
>rate-limit limit, or all acl entries will be rate-limited as a whole (in
>aggregate) to the limit?
>
>I tried to find out from the CCO, my impression is that the effect will be
>a aggregation rather than individual.. If so, is there any alternative
>means to achieve rate-limit of each entry of a long acl to the limit
>individually?

If your acl's do not overlap, they are rate-limited individually.
If you use overlapping acl's be careful about the order you
enter the rate-limit lines to your config, especially if you
use drop as a exceed-action.

Jorma



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:15 EDT