Section 3.102. <AuthBy RATELIMITSOURCE>

3.102. <AuthBy RATELIMITSOURCE>

Using <AuthBy RATELIMITSOURCE> allows you to limit the maximum number of requests that are served for a source.

The request sources can be divided into 2 separate policer groups, thus there are 2 separate parameters for the request handling parameters. Using 2 policer groups allows you to, for example, set limit for a single source or for number of sources.

See goodies/ratelimitsource.cfg for an example configuration.

3.102.1. SourceKey1

This string defines the format of first level policer key. The default value is %{Request:Calling-Station-Id}:%n.

3.102.2. SourceKey2

This string defines the format of second level policer key. The default value is %{Client:Identifier}.

3.102.3. MaxRate1

This integer defines the allowed maximum rate for first level policer. The default value is 10.

3.102.4. MaxRate2

This integer defines the allowed maximum rate for second level policer. The default value is 2000.

3.102.5. Policer1_Size

This integer defines the number of first level policer counters. The default value is 1000.

3.102.6. Policer2_Size

This integer defines the number of second level policer counters. The default value is 100.

3.102.7. TimeWindow1

This integer defines the time window for first level policer. The default value is 2.

3.102.8. TimeWindow2

This integer defines the time window for second level policer. The default value is 10.

3.102.9. MaxRateResult

This string defines the result that is used when MaxRate1 or MaxRate2 is exceeded. The allowed values are:

ACCEPT
REJECT
IGNORE
CHALLENGE

The values are not case-sensitive. The default value is IGNORE, which ignores the request.