Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have tried reading up on different methods of limiting (rate/bw) with haproxy, but seems the only working implementation I find is per /32 ip based limit. Is it possible to do rate limiting based on acl?

Samba has a nice solution to this, where the parameters to limit (based on acl) is: /0 /24 /32 .. so first variable is for the whole acl, next for /24 net, and last for single ip.

share|improve this question

You can limit sessions with ease, but considering you want to manipulate L3/L4 would it not be more appropriate to handle the limiting at a lower level - ie. With IP tables.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.