Limit the number of Router Advertisements processed on an interface

--000000000000dff11305e17d43f2
Content-Type: text/plain; charset="UTF-8"

Hi All,
     Is it possible to limit the number of Router Advertisements that will
be processed on an interface or on a Linux device as a whole (either
granularity is fine)?
*For example*, if an interface receives more than 200 RAs within a time
interval, only the first 200 will be processed.

There are sysctls to *disable* RA completely. i.e.
net.ipv6.conf.default.accept_ra=0,

Disable processing Default routes: net.ipv6.conf.default.accept_ra_defrtr=0

Disable processing Prefix: net.ipv6.conf.default.accept_ra_pinfo=0.

But I want to enable the above 3 functionalities but limit the number of
them being processed.

*Why?*
This is to avoid DOS attacks using RAs from being bombarded onto a linux
machine.

Dheeraj

--000000000000dff11305e17d43f2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi All,</div><div>=C2=A0=C2=A0=C2=A0=C2=A0 Is it poss=
ible to limit the number of Router Advertisements that will be processed on=
 an interface or on a Linux device as a whole (either granularity is fine)?=
</div><div><b>For example</b>, if an interface receives more than 200 RAs w=
ithin a time interval, only the first 200 will be processed.</div><div><br>=
</div><div>There are sysctls to <b>disable</b> RA completely. i.e. <br></di=
v><div>net.ipv6.conf.default.accept_ra=3D0,<br></div><div><br></div><div>Di=
sable processing Default routes: net.ipv6.conf.default.accept_ra_defrtr=3D0=
</div><div><br></div><div>Disable processing Prefix: net.ipv6.conf.default.=
accept_ra_pinfo=3D0.</div><div><br></div><div>But I want to enable the abov=
e 3 functionalities but limit the number of them being processed.<br></div>=
<div><br></div><div><b>Why?</b><br></div><div>This is to avoid DOS attacks =
using RAs from being bombarded onto a linux machine.</div><div><br></div><d=
iv>Dheeraj<br></div></div>

--000000000000dff11305e17d43f2--