Difference between revisions of "Limiting number of simultaneous connections"
From Notes_Wiki
(Created page with "=Limiting number of simultaneous connections using iptables= ==Using connlimit module== We can use connlimit module of iptables to limit number of simultaneous connections t...") |
m |
||
| Line 1: | Line 1: | ||
<yambe:breadcrumb>Iptables configuration|Iptables configuration</yambe:breadcrumb> | |||
=Limiting number of simultaneous connections using iptables= | =Limiting number of simultaneous connections using iptables= | ||
Revision as of 18:32, 17 August 2018
<yambe:breadcrumb>Iptables configuration|Iptables configuration</yambe:breadcrumb>
Limiting number of simultaneous connections using iptables
Using connlimit module
We can use connlimit module of iptables to limit number of simultaneous connections to server in following manner
iptables -I INPUT -p tcp --syn --dport 22 -m connlimit --connlimit-above 1 -j REJECT
This will allow only one ssh connection to server per client.
To limit number of simultaneous connections based on subnets we can use below syntax
iptables -p tcp --syn --dport 22 -m connlimit --connlimit-above 16 --connlimit-mask 24 -j REJECT
This would allow only 16 connections from each /24 network.
