Support for bandwidth throttling, per key and/or for server overall

[mmohaveri]

Hi,

We have a case that if the bandwidth of our outline server exceeds 10GB/s it will get banned by authorities. We need a feature to limit the bandwidth of the server (either per key or overall) so the servers do not get banned.

[bemasc]

By "authority", do you mean the hosting provider or a network attacker? Is this a hard threshold (9 GB/s is fine) or a rough estimate (high usage draws attention)? What is the time interval over which this trigger applies? Also, are you sure this number is correct? 10 GB/s (80 Gbps) is enormous. Even 10 Gbps is more than most VM hosts offer on a single instance.

…

On Tue, Dec 6, 2022, 6:02 AM Mahdi Mohaveri ***@***.***> wrote: Hi, We have a case that if the bandwidth of our outline server exceeds 10GB/s it will get banned by authorities. We need a feature to limit the bandwidth of the server (either per key or overall) so the servers do not get banned. — Reply to this email directly, view it on GitHub <#1246>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABO3SNSC6CF65QG5JGYDE3WL4MN3ANCNFSM6AAAAAASVLUF44> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[hamidmayeli]

By "authority", do you mean the hosting provider or a network attacker?

By'authority' he means the smart filtering being used in the country. It monitors the traffic and if it find a lot of traffic going through a single IP, it will block it. So, no it's not the provider of the outline server/VM/etc. Nor an attacker. It's the network provider too the target users.

[manhte2]

I dont find where is configuration for this feature, can someone help ?

[nodir-malikov]

Really need this feature

[Kuchizu]

When this feature will be released?

I tried limiting specific port to limit speed but it didn't work

sudo tc qdisc add dev ens3 root handle 1: htb default 30
sudo tc class add dev ens3 parent 1: classid 1:1 htb rate 10mbit
sudo tc filter add dev ens3 protocol ip parent 1:0 prio 1 u32 match ip dport 44444 0xffff flowid 1:1

also iptables didn't work. Really need this feature.