Allow configuring ICMP rate limiter mask

google / gvisor

Application Kernel for Containers

https://gvisor.dev

Apache License 2.0

15.63k stars 1.29k forks source link

Allow configuring ICMP rate limiter mask #6521

Open brunowonka opened 3 years ago

brunowonka commented 3 years ago

Description

We currently always apply ICMP rates to ICMP errors, linux allows configuration of those flags through net.ipv4.icmp_ratemask/net.ipv6.icmp.ratemask. We should have the same knobs and apply them uniformly for all outbound ICMP traffic.

Derived from the discovery of rate-limited ICMP Echo traffic in #6519.

github-actions[bot] commented 1 year ago

A friendly reminder that this issue had no activity for 120 days.