AFAICT, output policer is only supported per interface, not per flow. You should be able to apply an output policer on an interface with the command 'policer output name <policer name> <interface name>'.
Best ben > -----Original Message----- > From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of ???? ?????? > Sent: Monday, October 3, 2022 9:08 > To: vpp-dev@lists.fd.io > Subject: [vpp-dev] How to limit(police) upload/download per IP address? > > Hi, > We need to limit user ingress/ergress speed per IP4. > Is there any documentation how to perform this in VPP? > > I've made config based on this blog > https://blog.51cto.com/u_15301988/5181021 and it works: > > set interface ip address GigabitEthernet0/4/0 100.0.0.1/24 > set interface ip address GigabitEthernet0/5/0 200.0.0.1/24 > > set interface state GigabitEthernet0/4/0 up > set interface state GigabitEthernet0/5/0 up > > // Policers > configure policer name policy1 cir 1000 cb 90000 rate kbps round closest > type 1r2c conform-action transmit exceed-action drop > classify table mask l3 ip4 src > classify session policer-hit-next policy1 exceed-color table-index 0 match > l3 ip4 src 100.0.0.2 > set policer classify interface GigabitEthernet0/4/0 ip4-table 0 > > But how limit per direction i.e. 40mb ingress and 80mb egress?
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21961): https://lists.fd.io/g/vpp-dev/message/21961 Mute This Topic: https://lists.fd.io/mt/94085661/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-