Rate-limit an opened trafic

[dominique.fournier]

Hi,

Actually, I have a SSH connection with a high transfer rate that block all the service. I want to rate limit only this connection but without kill it. I create a limiter at 33kb/s, I try to add a rule in the firewall with ip source and destination, but it doesn't work. I think as the connection is already established, it is not taken by the rate limiter.

So, how should I limit this guy ?

Thanks a lot !!

[marcelloc]

You may need to reset firewall states to apply it to current traffic.

[dominique.fournier]

@marcelloc:

You may need to reset firewall states to apply it to current traffic.

I can do that, but, I think it will cut the SSH connection. I would like to apply my filter without cutting the transfer…

[jimp]

There isn't anything you can do to apply a limit to an active connection. The shaper, limiters, etc, all apply when a state is created. They don't apply to open connections.

[dominique.fournier]

Thanks for this answer. Can I imagine a rate-limiter with no limit and change it to a limited rate-limiter without cutting the connection ?

[jimp]

Not that I'm aware of, I think it would end up the same, only applying to new connections.