limit number of tcp connection for a GID
keramida at freebsd.org
Sun Jun 5 18:13:25 GMT 2005
On 2005-06-05 19:56, Riccardo Giuntoli <taglio at gmail.com> wrote:
> Hi folks,
> Do you have any idea for limiting the number of tcp ESTABLISHED
> connections for a GID?
ipfw can match connections per uid/gid and it also has limiting
capabilities. When combined with dummynet, it can also enforce
bandwidth limits. See the ipfw(8) manpage for details.
I'm not sure if pf does this already. Even if it doesn't though,
it may be possible to write a transparent proxy that limits the
connections per uid/gid. The support for transparent proxies in
pf is awesome :-)
More information about the freebsd-stable