{"id":134560,"date":"2025-11-12T13:26:39","date_gmt":"2025-11-12T13:26:39","guid":{"rendered":"http:\/\/webdomino.net\/?guid=59c0141a7fce7ce09d01125f5be56e68"},"modified":"2025-11-12T13:26:39","modified_gmt":"2025-11-12T13:26:39","slug":"source-and-state-limiters-introduced-in-pf","status":"publish","type":"post","link":"http:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/","title":{"rendered":"Source and state limiters introduced in pf"},"content":{"rendered":"\n<p>David Gwynne (<code>dlg@<\/code>) has\r\n<a href=\"https:\/\/marc.info\/?l=openbsd-cvs&amp;m=176283325419593&amp;w=2\">introduced<\/a>\r\nsource and state limiters,\r\nwhich provide a massive increase in the flexibily\r\nof <code>pf<\/code> traffic limiting:<\/p> \r\n\r\n<blockquote>\r\n<pre>CVSROOT:\t\/cvs\r\nModule name:\tsrc\r\nChanges by:\tdlg@cvs.openbsd.org\t2025\/11\/10 21:06:20\r\n\r\nModified files:\r\n\tsbin\/pfctl     : parse.y pfctl.8 pfctl.c pfctl_parser.c \r\n\t                 pfctl_parser.h \r\n\tshare\/man\/man5 : pf.conf.5 \r\n\tsys\/net        : pf.c pf_ioctl.c pf_table.c pfvar.h pfvar_priv.h \r\n\r\nLog message:\r\nintroduce source and state limiters in <a href=\"https:\/\/man.openbsd.org\/pf.4\">pf<\/a>.\r\n\r\nboth <a href=\"https:\/\/man.openbsd.org\/pf.conf.5#source\">source<\/a> and <a href=\"https:\/\/man.openbsd.org\/pf.conf.5#state\">state limiters<\/a> can provide constraints on the number\r\nof states that a set of rules can create, and optionally the rate\r\nat which they are created. state limiters have a single limit, but\r\nsource limiters apply limits against a source address (or network).\r\nthe source address entries are dynamically created and destroyed,\r\nand are also limited.\r\n<\/pre>\r\n<\/blockquote>\r\n\n<p><a href=\"http:\/\/undeadly.org\/cgi?action=article;sid=20251112132639\">Read more&hellip;<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>David Gwynne (dlg@) has<br \/>\nintroduced<br \/>\nsource and state limiters,<br \/>\nwhich provide a massive increase in the flexibily<br \/>\nof pf traffic limiting: <\/p>\n<p>CVSROOT:\t\/cvs<br \/>\nModule name:\tsrc<br \/>\nChanges by:\tdlg@cvs.openbsd.org\t2025\/11\/10 21:06:20<\/p>\n<p>Modified files:<br \/>\n&#8230;<\/p>\n","protected":false},"author":174,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4132],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Source and state limiters introduced in pf - WebDomino.NET<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Source and state limiters introduced in pf - WebDomino.NET\" \/>\n<meta property=\"og:description\" content=\"David Gwynne (dlg@) has introduced source and state limiters, which provide a massive increase in the flexibily of pf traffic limiting:    CVSROOT: \/cvs Module name: src Changes by: dlg@cvs.openbsd.org 2025\/11\/10 21:06:20  Modified files: ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/\" \/>\n<meta property=\"og:site_name\" content=\"WebDomino.NET\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-12T13:26:39+00:00\" \/>\n<meta name=\"author\" content=\"OpenBSD Journal\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"OpenBSD Journal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/\",\"url\":\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/\",\"name\":\"Source and state limiters introduced in pf - WebDomino.NET\",\"isPartOf\":{\"@id\":\"http:\/\/webdomino.net\/#website\"},\"datePublished\":\"2025-11-12T13:26:39+00:00\",\"dateModified\":\"2025-11-12T13:26:39+00:00\",\"author\":{\"@id\":\"http:\/\/webdomino.net\/#\/schema\/person\/5e6479eaee9a98381747d6c8acf6be72\"},\"breadcrumb\":{\"@id\":\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/webdomino.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Source and state limiters introduced in pf\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/webdomino.net\/#website\",\"url\":\"http:\/\/webdomino.net\/\",\"name\":\"WebDomino.NET\",\"description\":\"Global NEWS WordPress site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/webdomino.net\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/webdomino.net\/#\/schema\/person\/5e6479eaee9a98381747d6c8acf6be72\",\"name\":\"OpenBSD Journal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/webdomino.net\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/2.gravatar.com\/avatar\/57d768f58e5bcb4c2a506e4e9cbd3a40?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/2.gravatar.com\/avatar\/57d768f58e5bcb4c2a506e4e9cbd3a40?s=96&d=mm&r=g\",\"caption\":\"OpenBSD Journal\"},\"sameAs\":[\"http:\/\/undeadly.org\/\"],\"url\":\"http:\/\/webdomino.net\/index.php\/author\/openbsd-journal\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Source and state limiters introduced in pf - WebDomino.NET","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/","og_locale":"en_US","og_type":"article","og_title":"Source and state limiters introduced in pf - WebDomino.NET","og_description":"David Gwynne (dlg@) has introduced source and state limiters, which provide a massive increase in the flexibily of pf traffic limiting:    CVSROOT: \/cvs Module name: src Changes by: dlg@cvs.openbsd.org 2025\/11\/10 21:06:20  Modified files: ...","og_url":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/","og_site_name":"WebDomino.NET","article_published_time":"2025-11-12T13:26:39+00:00","author":"OpenBSD Journal","twitter_misc":{"Written by":"OpenBSD Journal","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/","url":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/","name":"Source and state limiters introduced in pf - WebDomino.NET","isPartOf":{"@id":"http:\/\/webdomino.net\/#website"},"datePublished":"2025-11-12T13:26:39+00:00","dateModified":"2025-11-12T13:26:39+00:00","author":{"@id":"http:\/\/webdomino.net\/#\/schema\/person\/5e6479eaee9a98381747d6c8acf6be72"},"breadcrumb":{"@id":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/webdomino.net\/index.php\/openbsd\/source-and-state-limiters-introduced-in-pf\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/webdomino.net\/"},{"@type":"ListItem","position":2,"name":"Source and state limiters introduced in pf"}]},{"@type":"WebSite","@id":"http:\/\/webdomino.net\/#website","url":"http:\/\/webdomino.net\/","name":"WebDomino.NET","description":"Global NEWS WordPress site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/webdomino.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/webdomino.net\/#\/schema\/person\/5e6479eaee9a98381747d6c8acf6be72","name":"OpenBSD Journal","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/webdomino.net\/#\/schema\/person\/image\/","url":"http:\/\/2.gravatar.com\/avatar\/57d768f58e5bcb4c2a506e4e9cbd3a40?s=96&d=mm&r=g","contentUrl":"http:\/\/2.gravatar.com\/avatar\/57d768f58e5bcb4c2a506e4e9cbd3a40?s=96&d=mm&r=g","caption":"OpenBSD Journal"},"sameAs":["http:\/\/undeadly.org\/"],"url":"http:\/\/webdomino.net\/index.php\/author\/openbsd-journal\/"}]}},"_links":{"self":[{"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/posts\/134560"}],"collection":[{"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/users\/174"}],"replies":[{"embeddable":true,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/comments?post=134560"}],"version-history":[{"count":1,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/posts\/134560\/revisions"}],"predecessor-version":[{"id":134561,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/posts\/134560\/revisions\/134561"}],"wp:attachment":[{"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/media?parent=134560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/categories?post=134560"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/webdomino.net\/index.php\/wp-json\/wp\/v2\/tags?post=134560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}