10 Jun
2003
10 Jun
'03
15:02
On Tue, 10 Jun 2003, Mark Perry wrote:
Martin's analogy to tokens in a bucket works very well, it separates the average rate (--limit) from the initial burst (--limit-burst which is time independent.)
Actually, it's not quite an analogy - "token bucket filter" is simply the technical term for this algorithm. (It's even used in the iptables man page...:-))
I will use Martin's explanation (reworded) in future ;-)
It's not really "my" explanation - a read it some time ago, probably worded somewhat differently, on the netfilter mailing list... Martin