Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Rate limiting UDP,Multicast,ICMP

  • From: Ian Cooper
  • Date: Tue Nov 13 12:57:18 2001


If you're limiting inbound for them then you might affect their ability to view some streaming media.

--On Tuesday, November 13, 2001 12:42 -0500 Thomas Gainer <TGainer@e-xpedient.com> wrote:

A little more information.  We sell 100Mb Ethernet pipes to the Internet.
(Yes, there are a few of us left).  A fair number of these customers are
small businesses.  Usually, they have servers but very little IT support
and even less IT know how.  My thought is to rate limit UDP and ICMP at
the customer port to no more than 3Mb/s so WHEN (not if) a customer is
compromised, the effects are somewhat limited and my MAN pipes have some
measure protection.  The question is, what am I not thinking of?  DNS,
TFTP and such should all operate virtually unaffected, as they are not
bandwidth hungry services.

Thomas





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.