X-Git-Url: http://git.bitcoin.ninja/index.cgi?p=flowspec-xdp;a=blobdiff_plain;f=README.md;h=64371974b316aaabca515327f2b28a610c92f576;hp=2d96ec74c9c0e0b05cfe842cae19491cb9d1f58b;hb=0ac7dea853a16579072fe9d85cfc791226167491;hpb=14f8186f33558b42201be806e9725acd3d445182 diff --git a/README.md b/README.md index 2d96ec7..6437197 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ provide rate-limiting on a per-source basis. When the upper two bytes in an exte 0x8306 (rate in bytes) or 0x830c (rate in packets), we rate limit the same as 0x8006 or 0x800c except that the rate limit is applied per source address. The encoding mirrors the non-per-source encoding in that the last 4 octets are the floating-point rate limit. Instead of a 2 octet -AS/ignored value, the third octet is the maximum number of source IPs tracked (plus one, times 1024) +AS/ignored value, the third octet is the maximum number of source IPs tracked (plus one, times 4096) and the fourth octet is a prefix length mask, which is applied to the source IP before rate-limiting. `install.sh` provides a simple example script which will compile and install a generated XDP program