On 05/15/2017 09:31 PM, Vasiliy Tolstov wrote:

Hi. I have a problem that some vps generate very big pps (500000). I want to limit it for some reasonable value. iptables does not support by default limit by pps more that 10000, i can use nft... but Why not use tc for this ? http://www.lartc.org/manpages/tc-pbfifo.html http://man7.org/linux/man-pages/man8/tc-sfb.8.html

As i understand firstly we can limit by pps and secondly via bandwidth... What do you think?

That's exactly what <bandwidth/> is for. Although, we don't support pps based limiting rather than bps based rate limiting, but I believe the latter has wider usage range. Michal