Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a linux based traffic shaper (iptables + tc htb policy). It works in bridge mode. Shapes traffic based on IPs and ports (there are about 100 rules in the "mangle" chain of iptables). Right now its throughoutput is about 100 mb/s (I don't remember pps, there are about 800 users in the network). Just was wondering - when I will hit the limit. How much traffic could a linux-based shaper possibly get throuhg it. If you have one under heavy load, please could you write what machine you use and what load there is. Or if you have any other info about the subj, please write as well.

Thanks in advance.

share|improve this question
don't forget, throughput it important, but think also about latency. Your setup sounds very cool, do you care to share your configurations? – The Unix Janitor Apr 14 '10 at 14:31

You should be able to do a good few hundred megabit. Load balancing's a lot easier so I'd say Chopper3's answer doesn't really apply.

By far the best thing to do is look at the CPU logs in the system stats you should already be recording (Cacti is my preference, but many people swear by Munin) and compare them with the bandwidth graphs. In this case you are primarily concerned with System CPU usage.

It's so machine and kernel dependent that the only real answer is find out for yourself.

It is worth looking at the iptables stats and reorder rules so that more commonly hit rules match as early as possible (creating separate chains for each in/out interface pair can be a massive performance gain in some cases).

share|improve this answer

It depends on your server, it's components (CPU/s, NICs, buses, memory speed etc.) and OS/config but we have single servers happily load-balancing 8-9Gbps all day every day.

share|improve this answer
Yup, good server-grade NICs are important. – gravyface Apr 14 '10 at 13:00
Is this HTB? Various users have experienced apparent limits in HTB's ability to scale past several hundred Mbps. – Thelema Jul 1 '11 at 21:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.