Pacemaker is a script that monitors network traffic and dynamically limits the rate.
Pacemaker is a powerful and efficient script that analyzes the network traffic in real-time and detects any machines that are possibly overusing network resources. This software is capable of catching a wide range of activities such as Windows worm scans, P2P network traffic, and port scans that surpass the standard number of connections that a typical machine should perform.
It should be noted that Pacemaker applies an algorithm to identify machines that are abusing the network for more than two minutes before putting the IP address on a ratelimit list. The machine in question will remain listed for the same amount of time that it has been abusing the network. The script uses iptables to designate packets for the specific IP addresses that are abusing network resources. Additionally, Pacemaker allows iproute2 and tc to regulate and filter the traffic to the desired speed limit.
To run Pacemaker, users need to have a network sniffer such as tcpdump or tethereal, the latest iproute2+tc tools, a kernel that supports iptables packet mangling, and the most recent iptables. Once a class has been added to your ratelimiting system (there is an example in htb-qdisc-example-eth0 or htb-qdisc-example-eth1), it is time to open 'pacemaker', customize the program settings to match your local preferences, and run 'make install'.
What's new in this release is a documentation fix that correctly lists the software required to operate Pacemaker. Overall, this is an efficient and powerful software that can effectively monitor network traffic and limit traffic from abusive machines.
It should be noted that Pacemaker applies an algorithm to identify machines that are abusing the network for more than two minutes before putting the IP address on a ratelimit list. The machine in question will remain listed for the same amount of time that it has been abusing the network. The script uses iptables to designate packets for the specific IP addresses that are abusing network resources. Additionally, Pacemaker allows iproute2 and tc to regulate and filter the traffic to the desired speed limit.
To run Pacemaker, users need to have a network sniffer such as tcpdump or tethereal, the latest iproute2+tc tools, a kernel that supports iptables packet mangling, and the most recent iptables. Once a class has been added to your ratelimiting system (there is an example in htb-qdisc-example-eth0 or htb-qdisc-example-eth1), it is time to open 'pacemaker', customize the program settings to match your local preferences, and run 'make install'.
What's new in this release is a documentation fix that correctly lists the software required to operate Pacemaker. Overall, this is an efficient and powerful software that can effectively monitor network traffic and limit traffic from abusive machines.
What's New
Version 0.4: N/A