gluon-ebtables-limit-arp: a package for ARP rate-limiting
This package adds filters to limit the amount of ARP Requests
devices are allowed to send into the mesh. The limits are 6 packets
per minute per client device, by MAC address, and 1 per second per
node in total.
A burst of up to 50 ARP Requests is allowed until the rate-limiting
takes effect (see --limit-burst in the ebtables manpage).
Furthermore, ARP Requests with a target IP already present in the
batman-adv DAT Cache are excluded from the rate-limiting,
both regarding counting and filtering, as batman-adv will respond
locally with no burden for the mesh. Therefore, this limiter
should not affect popular target IPs, like gateways.
However it should mitigate the problem of curious people or
smart devices scanning the whole IP range. Which could create
a significant amount of overhead for all participants so far.
Signed-off-by:
Linus Lüssing <linus.luessing@c0d3.blue>
Showing
- package/gluon-ebtables-limit-arp/Makefile 59 additions, 0 deletionspackage/gluon-ebtables-limit-arp/Makefile
- package/gluon-ebtables-limit-arp/files/etc/init.d/gluon-arp-limiter 14 additions, 0 deletions...uon-ebtables-limit-arp/files/etc/init.d/gluon-arp-limiter
- package/gluon-ebtables-limit-arp/files/lib/gluon/ebtables/100-arp-limit-chains 3 additions, 0 deletions...s-limit-arp/files/lib/gluon/ebtables/100-arp-limit-chains
- package/gluon-ebtables-limit-arp/files/lib/gluon/ebtables/320-arp-limit-rules 6 additions, 0 deletions...es-limit-arp/files/lib/gluon/ebtables/320-arp-limit-rules
- package/gluon-ebtables-limit-arp/src/LICENSE 339 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/LICENSE
- package/gluon-ebtables-limit-arp/src/Makefile 14 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/Makefile
- package/gluon-ebtables-limit-arp/src/addr_store.c 167 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/addr_store.c
- package/gluon-ebtables-limit-arp/src/addr_store.h 33 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/addr_store.h
- package/gluon-ebtables-limit-arp/src/gluon-arp-limiter.c 299 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/gluon-arp-limiter.c
- package/gluon-ebtables-limit-arp/src/gluon-arp-limiter.h 13 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/gluon-arp-limiter.h
- package/gluon-ebtables-limit-arp/src/lookup3.c 998 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/lookup3.c
- package/gluon-ebtables-limit-arp/src/lookup3.h 6 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/lookup3.h
- package/gluon-ebtables-limit-arp/src/mac.c 47 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/mac.c
- package/gluon-ebtables-limit-arp/src/mac.h 19 additions, 0 deletionspackage/gluon-ebtables-limit-arp/src/mac.h
Loading
Please register or sign in to comment