ICMP rate-limiting

In IP networks, ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. messages are generated in response to either inquiries or requests from routing and diagnostic functions. These messages are directed to the applications originating the inquiries. In unusual situations, if the messages are generated rapidly with the intent of overloading network circuits, they can threaten network availability. This problem is visible in denial-of-service (DoS Denial-of-Service. A cyber-attack meant to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to a network.) attacks or other malicious behaviors where a worm or virus overloads the network with ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. messages to an extent where no other traffic can get through. (ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. messages themselves can also be misused as virus carriers). Such malicious misuses of ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. can include a high number of ping packets that mimic a valid source IP address and an invalid destination IP address (spoofed pings), and a high number of response messages (such as Destination Unreachable error messages) generated by the network.

ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. rate-limiting provides a method for limiting the amount of bandwidth that may be used for inbound ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. traffic on a switch port. This feature allows users to restrict ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. traffic to percentage levels that permit necessary ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. functions, but throttle additional traffic that may be caused by worms or viruses (reducing their spread and effect). In addition, ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. rate-limiting preserves inbound port bandwidth for non-ICMP Internet Control Message Protocol. A protocol used by network devices to send error messages and operational information indicating success or failure when communicating with another IP address. traffic.