diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2016-07-23 12:41:39 +0200 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2016-07-23 12:41:39 +0200 |
| commit | 7ac9f9195119295fa81313ea856f1bfec4c55fe7 (patch) | |
| tree | b7dafed9fdba1bf00dfff521a88dc77cf54ab4f2 | |
| parent | 6766d7fbba1b2276a28828a15d24c19be05c41fe (diff) | |
ratelimiter: correct comment
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| -rw-r--r-- | src/ratelimiter.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/ratelimiter.c b/src/ratelimiter.c index 6bf85b0..c322b3d 100644 --- a/src/ratelimiter.c +++ b/src/ratelimiter.c @@ -19,7 +19,7 @@ static inline void cfg_init(struct hashlimit_cfg1 *cfg, int family) else if (family == NFPROTO_IPV6) cfg->srcmask = 96; cfg->mode = XT_HASHLIMIT_HASH_SIP; /* source IP only -- we could also do source port by ORing this with XT_HASHLIMIT_HASH_SPT */ - cfg->avg = XT_HASHLIMIT_SCALE / RATELIMITER_PACKETS_PER_SECOND; /* 50 per second per IP */ + cfg->avg = XT_HASHLIMIT_SCALE / RATELIMITER_PACKETS_PER_SECOND; /* 75 per second per IP */ cfg->burst = RATELIMITER_PACKETS_BURSTABLE; /* Allow bursts of 5 at a time */ cfg->gc_interval = 1000; /* same as expiration date */ cfg->expire = 1000; /* Units of avg (seconds = 1) times 1000 */ |