On Feb 6, 2020, at 12:00 PM, Matt Taggart wrote:

This smells like a munin or smokeping plugin (or some other sort of 
monitoring) gathering data for graphing.

Yup. That is a real possibility. The question is what we do about it.

If I understood, we left it at:

1) Toke was going to look into some way to spread the 'netperf.bufferbloat.net' load across several of our netperf servers.

2) Can someone give me advice about iptables/tc/? to identify IP addresses that make "too many" connections and either shut them off or dial their bandwidth back to a 3 or 5 kbps? 

(If you're terminally curious, Line 5 of https://github.com/richb-hanover/netperfclean/blob/master/addtoblacklist.sh shows the current iptables command to drop connections from "heavy users" identified in the findunfilteredips.sh script. You can read the current iptables rules at: https://github.com/richb-hanover/netperfclean/blob/master/iptables.txt)

Thanks.

Rich