Re: [liberationtech] Blocking TCP flows?

2013-06-15 Thread Eugen Leitl
- Forwarded message from Phil Fagan philfa...@gmail.com - Date: Fri, 14 Jun 2013 13:34:16 -0600 From: Phil Fagan philfa...@gmail.com To: Eric Wustrow ew...@umich.edu Cc: NANOG list na...@nanog.org Subject: Re: Blocking TCP flows? I think we just discussed this over in the huawei list ;-)

Re: [liberationtech] Blocking TCP flows?

2013-06-15 Thread Julian Oliver
Wow. http://telex.cc is really super. Congrats to Eric and co. As far as blocking TCP flows, a couple of good NICs (plenty of mem) on a Linux host, iptables and some ToS is how I'd approach it. You definitely don't want to be doing it in software, at the application layer. The kernel is closest