lyes/nixfiles
1
0
Fork 0
Code Issues Pull requests Activity Actions

Adding rate limit for zora, and other config tweaks

Browse source
This commit is contained in:
Lyes Saadi 2026-01-22 16:25:35 +01:00
parent 9b595c7f13
commit 9a4ff80762
Signed by: lyes
GPG key ID: 55A1D803917CF39A
8 changed files with 90 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

46
hosts/zora/networking.nix
View file

@ -101,20 +101,36 @@
};
# Imposing a bandwidth limit to avoid Aurore/Crans disruptions
# networking.nftables = {
# tables.rate_limit = {
# name = "rate_limit";
# family = "inet";
# enable = true;
# content = ''
# limit lim { rate over 20 mbytes/second burst 40 mbytes ; comment "use to limit taffic" ; }
networking.nftables = {
tables.rate_limit = {
name = "rate_limit";
family = "inet";
enable = true;
content = ''
limit ratelimit { rate 1250 kbytes/second burst 2500 kbytes ; comment "used to limit taffic" ; }
# chain IN {
# type filter hook input priority filter; policy drop;
# tcp dport 80 limit name "lim" accept
# tcp dport 443 limit name "lim" accept
# }
# '';
# };
# };
chain input {
type filter hook input priority 0; policy drop;
iifname lo accept
tcp dport 22 accept
iifname ens2f0 limit name "ratelimit" accept
iifname veth-mogma limit name "ratelimit" accept
}
'';
# chain output {
# type filter hook output priority 0; policy drop;
# iifname lo accept
# tcp dport 22 accept
# iifname ens2f0 limit name "ratelimit" accept
# }
};
};
}