[LARTC] Activate ingress policies on suse enterprise server 9

[Andy Furniss]

Grames Gernot wrote:
> Hi,
>  
> what is needed to activate ingress policies for enterprise server 9!

> tc qdisc add dev eth0 ingress
> tc filter add dev eth0 parent ffff: protocol ip u32 match ip dport 8099
> 0xffff police rate 1kbit burst 1kbit mtu 1 drop flowid :1

I get a memory allocation error if I try to add that.

Playing around it seems policer doesn't like small burst and mtu 
together. Burst is a value and will act like MTU so the rule below 
should work and do what you want - drop everything with dport 8099.

tc filter add dev eth0 parent ffff: protocol ip u32 match ip dport 8099 
0xffff police rate 1kbit burst 1 drop flowid :1

Andy.