1 .\" $NetBSD: ppsratecheck.9,v 1.5 2007/02/20 08:26:35 wiz Exp $
3 .\" Copyright (c) 2000 The NetBSD Foundation, Inc.
4 .\" All rights reserved.
6 .\" This code is derived from software contributed to The NetBSD Foundation
7 .\" by Jun-ichiro itojun Hagino.
9 .\" Redistribution and use in source and binary forms, with or without
10 .\" modification, are permitted provided that the following conditions
12 .\" 1. Redistributions of source code must retain the above copyright
13 .\" notice, this list of conditions and the following disclaimer.
14 .\" 2. Redistributions in binary form must reproduce the above copyright
15 .\" notice, this list of conditions and the following disclaimer in the
16 .\" documentation and/or other materials provided with the distribution.
18 .\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
19 .\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
20 .\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
21 .\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
22 .\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23 .\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24 .\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25 .\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26 .\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28 .\" POSSIBILITY OF SUCH DAMAGE.
35 .Nd function to help implement rate-limited actions
39 .Fn ppsratecheck "struct timeval *lasttime" "int *curpps" "int maxpps"
43 function provides easy way to perform packet-per-sec,
44 or event-per-sec, rate limitation.
45 The motivation for implementing
47 was to provide a mechanism that could be used to add rate limitation to
48 network packet output.
49 For certain network packets, we may want to impose rate limitation,
50 to avoid denial-of-service attack possibilities.
53 specifies maximum permitted packets, or events, per second.
58 times in a given one second period,
59 the function will return 0, indicating that we exceeded the limit.
60 If we are below the limit, the function will return 1.
63 is set to 0, the function will always return 0
64 .Pq no packets/events are permitted .
67 indicates that rate limitation is disabled, and
74 are used to maintain the number of recent calls.
76 will be incremented every time
78 is called, and will be reset whenever necessary.