[RADIATOR] Rate limiting support.

Hugh Irvine hugh at open.com.au
Tue Jul 1 00:58:56 CDT 2008


Hello Patrick -

I have written a couple of different versions of hooks to do rate- 
limiting.

See the last two examples in "goodies/hooks.txt".

regards

Hugh


On 26 Jun 2008, at 00:08, Patrick Renkens wrote:

> Hi,
>
> I know there have been a few discussions in the past about 'rate  
> limiting RADIUS requests', but as far as I know there is no option  
> for this within Radiator (4.2)?
>
> The situation for which I would like something like rate limiting  
> is mainly a radius to radius (proxy) setup. The main reason for  
> wanting a rate limiting possibility is the fact that every now and  
> then, a bad configured client or RADIUS-server, is sending out such  
> an amount of RADIUS-requests to our proxies that other users might  
> suffer from it.
> At least our RADIUS-probes from a monitoring system tend to fail  
> (timeout) because of such a situation (and I get a phonecall in the  
> middle of the night).
> In a situation like this I would like to limit the requests for  
> this particular client (remote RADIUS server) to ensure proper  
> service for the other users. Completely disabling the client is  
> maybe too much, because they still send valid request from  
> correctly configured clients.
> I cannot use the parameter DupInterval because the requests have  
> different RADIUS Identifiers.
>
> So, is there a way for rate limiting RADIUS requests?
>
>
> Kind regards,
> Patrick Renkens
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.




More information about the radiator mailing list