Skip to content

v1.57.0

Choose a tag to compare

@DannyRuizB DannyRuizB released this 16 Oct 13:00
· 5 commits to main since this release
c885f51

New error smell for rates the front-end does not read — and the two front-ends disagree about the unit:

  • limit-rate-invalid — iptables (--limit, --hashlimit-upto/-above) takes any prefix of second/minute/hour/day in any case (5/min, 5/Sec, a bare 5) but refuses plurals (5/minutes), 5/hr, 5/week, 0/s, five/min and rates above 10,000/s (-m limit) or 1,000,000/s (hashlimit). nft takes second, minute, hour, day or week spelled out in lower case — 5/min copied from iptables is a syntax error, and 0/second is refused by the kernel. Each finding names the fix and says when the spelling is the other syntax's.

Measured with real loads (iptables 1.8.11 nf_tables and legacy, ip6tables, nftables 1.1.3 and 1.1.6). New samples iptables-limit-rate-plural.txt and nft-limit-rate-abbrev.txt, refused as shipped and loading once fixed, in the Load sample dropdown. The README release line had drifted to "67 smells" with two missing — fixed, and a test now pins it to the linter. 70 smells, tests 363. (#80)