moony/dockerfiles
1
2
Fork 0
mirror of https://github.com/vimagick/dockerfiles synced 2024-06-20 22:08:39 +00:00
Code Issues Releases Wiki Activity

limit connect

Browse Source
This commit is contained in:
kev 2015-09-29 15:30:08 +08:00
parent e9f061a465
commit b6ac07f59b
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
iptables/Dockerfile
View File

@ -7,6 +7,8 @@ MAINTAINER kev <noreply@datageek.info>
RUN apk add -U iproute2
ENV LIMIT_PORT 8388
ENV LIMIT_CONN 5
ENV TCP_PORTS 80,443
ENV UDP_PORTS 53
ENV RATE 1mbit
@ -15,6 +17,7 @@ ENV LATENCY 50ms
ENV INTERVAL 60
CMD iptables -F \
&& iptables -A INPUT -p tcp -m state --state NEW --dport $LIMIT_PORT -m connlimit --connlimit-above $LIMIT_CONN -j DROP \
&& iptables -A OUTPUT -p tcp -m state --state NEW -m multiport ! --dports $TCP_PORTS -j DROP \
&& iptables -A OUTPUT -p udp -m state --state NEW -m multiport ! --dports $UDP_PORTS -j DROP \
&& tc qdisc add dev eth0 root tbf rate $RATE burst $BURST latency $LATENCY \