Home / server / Questions / 333480
Accepted
J. M. Becker
Asked: 2011-11-22 19:46:10 +0800 CST

IPtables rate-limit, What are the differences between modules? Recent, Limit

  • 772

I am doing some rate-limiting with IPtables, and i'm not sure if I should use "Recent" or "Limit"

What are the differences between the two? If they both achieve the same result, which one has better performance? I would like to know, regardless if any difference would be perceivable.

I am looking to ACCEPT if under limit, and REJECT if over. I'm not interested in thus bandwidth throttling, I don't want a queue.

I don't need any syntax examples, both have ample use examples online. I have also used Limit in the past.

I appreciate any responses.

linux connection iptables tcp

1 Answers

  1. Best Answer

    I think this link explains both modules in good detail.

    In short, the limit module puts a limit on the number of times a rule can be matched. The recent module enables you to create a dynamic list of IPs and then use this list to match in other rules differently (do special NATing, deny access, etc..).

    • 3