<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Feb 6, 2020, at 12:00 PM, Matt Taggart wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">This smells like a munin or smokeping plugin (or some other sort of<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">monitoring) gathering data for graphing.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""></div></blockquote></div><br class=""><div class="">Yup. That is a real possibility. The question is what we do about it.</div><div class=""><br class=""></div><div class="">If I understood, we left it at:</div><div class=""><br class=""></div><div class="">1) Toke was going to look into some way to spread the '<a href="http://netperf.bufferbloat.net" class="">netperf.bufferbloat.net</a>' load across several of our netperf servers.</div><div class=""><br class=""></div><div class="">2) Can someone give me advice about iptables/tc/? to identify IP addresses that make "too many" connections and either shut them off or dial their bandwidth back to a 3 or 5 kbps? </div><div class=""><br class=""></div><div class="">(If you're terminally curious, Line 5 of <a href="https://github.com/richb-hanover/netperfclean/blob/master/addtoblacklist.sh" class="">https://github.com/richb-hanover/netperfclean/blob/master/addtoblacklist.sh</a> shows the current iptables command to drop connections from "heavy users" identified in the findunfilteredips.sh script. You can read the current iptables rules at: <a href="https://github.com/richb-hanover/netperfclean/blob/master/iptables.txt" class="">https://github.com/richb-hanover/netperfclean/blob/master/iptables.txt</a>)</div><div class=""><br class=""></div><div class="">Thanks.</div><div class=""><br class=""></div><div class="">Rich</div></div></div></body></html>