[RADIATOR] Rate limiting support.
Hugh Irvine
hugh at open.com.au
Tue Jul 1 00:58:56 CDT 2008
Hello Patrick -
I have written a couple of different versions of hooks to do rate-
limiting.
See the last two examples in "goodies/hooks.txt".
regards
Hugh
On 26 Jun 2008, at 00:08, Patrick Renkens wrote:
> Hi,
>
> I know there have been a few discussions in the past about 'rate
> limiting RADIUS requests', but as far as I know there is no option
> for this within Radiator (4.2)?
>
> The situation for which I would like something like rate limiting
> is mainly a radius to radius (proxy) setup. The main reason for
> wanting a rate limiting possibility is the fact that every now and
> then, a bad configured client or RADIUS-server, is sending out such
> an amount of RADIUS-requests to our proxies that other users might
> suffer from it.
> At least our RADIUS-probes from a monitoring system tend to fail
> (timeout) because of such a situation (and I get a phonecall in the
> middle of the night).
> In a situation like this I would like to limit the requests for
> this particular client (remote RADIUS server) to ensure proper
> service for the other users. Completely disabling the client is
> maybe too much, because they still send valid request from
> correctly configured clients.
> I cannot use the parameter DupInterval because the requests have
> different RADIUS Identifiers.
>
> So, is there a way for rate limiting RADIUS requests?
>
>
> Kind regards,
> Patrick Renkens
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
More information about the radiator
mailing list