iptables-rate-limit

iptables-rate-limit

sudo iptables -F
sudo ip6tables -F

# limit traffic with destination port 443 to 80 NEW CONNECTIONS per minute
# --hashlimit-burst is when the rate limiting starts counting, at the first new connection
# --hashlimit-htable-expire is in milliseconds and is required to be at least as long as the --hashlimit-above interval

# use a different --hashlimit-name with each service

# accept port traffic
sudo iptables -I INPUT -p tcp --dport 443 --match hashlimit --hashlimit-above 80/min --hashlimit-burst 1 --hashlimit-mode srcip --hashlimit-name hserver --hashlimit-htable-expire 60000 -m state --state NEW -j DROP
# allow IP address full speed
sudo iptables -I INPUT -s 8.8.8.8 -j ACCEPT

# accept port traffic
sudo ip6tables -I INPUT -p tcp --dport 443 --match hashlimit --hashlimit-above 80/min --hashlimit-burst 1 --hashlimit-mode srcip --hashlimit-name hserver --hashlimit-htable-expire 60000 -m state --state NEW -j DROP
# allow IP address full speed
sudo ip6tables -I INPUT -s 2607:f8b0:4004:c1d::66 -j ACCEPT