So there is no way to police per IPs. In other words to incorporate separate limiter (1.0.0.1, 1.0.0.2, 1.0.0.3 - 60in/20out, 1.0.0.10, 1.0.0.20, 1.0.0.30 - 90in/80out etc.) to all users behind interface?
________________________________ От: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> от имени Benoit Ganne (bganne) via lists.fd.io <bganne=cisco....@lists.fd.io> Отправлено: 3 октября 2022 г. 12:43 Кому: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> Тема: Re: [vpp-dev] How to limit(police) upload/download per IP address? AFAICT, output policer is only supported per interface, not per flow. You should be able to apply an output policer on an interface with the command 'policer output name <policer name> <interface name>'. Best ben > -----Original Message----- > From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of ???? ?????? > Sent: Monday, October 3, 2022 9:08 > To: vpp-dev@lists.fd.io > Subject: [vpp-dev] How to limit(police) upload/download per IP address? > > Hi, > We need to limit user ingress/ergress speed per IP4. > Is there any documentation how to perform this in VPP? > > I've made config based on this blog > https://blog.51cto.com/u_15301988/5181021 and it works: > > set interface ip address GigabitEthernet0/4/0 100.0.0.1/24 > set interface ip address GigabitEthernet0/5/0 200.0.0.1/24 > > set interface state GigabitEthernet0/4/0 up > set interface state GigabitEthernet0/5/0 up > > // Policers > configure policer name policy1 cir 1000 cb 90000 rate kbps round closest > type 1r2c conform-action transmit exceed-action drop > classify table mask l3 ip4 src > classify session policer-hit-next policy1 exceed-color table-index 0 match > l3 ip4 src 100.0.0.2 > set policer classify interface GigabitEthernet0/4/0 ip4-table 0 > > But how limit per direction i.e. 40mb ingress and 80mb egress?
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21962): https://lists.fd.io/g/vpp-dev/message/21962 Mute This Topic: https://lists.fd.io/mt/94085661/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
