Policing action in tc(8) Linux Policing action in tc(8) (NAME) tc-police - tc (SYNOPSIS) tc ... action police [ rate RATE burst BYTES[/BYTES] ] [ pkts_rate RATE pkts_burst PACKETS] [ mtu BYTES[/BYTES] ] [ peakrate RATE ] [ overhead BYTES ] [ linklayer TYPE ] [ CONTROL ] tc ... filter ... [ estimator SAMPLE AVERAGE ] action police avrate RATE [ CONTROL ] CONTROL := conform-exceed EXCEEDACT[/NOTEXCEEDACT EXCEEDACT/NOTEXCEEDACT := { pipe | ok | reclassify | drop | continue | goto chain CHAIN_INDEX } (DESCRIPTION) police . : (dual token bucket) rate burst mtu peakrate overhead linklayer . estimator . . pkt_rate pkt_burst . rate pkt_rate . (OPTIONS) rate RATE . conform-exceed . burst BYTES[/BYTES] (burst) ('/') ( ) . pkt_rate RATE . conform-exceed . pkt_burst PACKETS (burst) . mtu BYTES[/BYTES] ( ). . burst . . peakrate RATE (bucket depletion rate) rate . avrate RATE RATE . overhead BYTES rate peakrate . linklayer TYPE (link layer) . TYPE ethernet () atm adsl ( ) . ATM ethernet . estimator SAMPLE AVERAGE . SAMPLE AVERAGE . conform-exceed EXCEEDACT[/NOTEXCEEDACT] . : continue . drop (drop). shot drop . ok . (conforming) . pass ok . reclassify ( ) . (exceeding) . pipe . (EXAMPLES) police (ingress) . ( dial-up) (latency) . qdisc ingress u32 1mbit/s : # tc qdisc add dev eth0 handle ffff: ingress # tc filter add dev eth0 parent ffff: u32 \ match u32 0 0 \ police rate 1mbit burst 100k qdisc . u32 ( police ). (SEE ALSO) tc(8) iproute2 20 Jan 2015 Policing action in tc(8)