This article shares a hands‑on, production‑tested DDoS mitigation guide that covers real‑world attack analysis, layered defense architecture, Linux kernel‑level traffic cleaning with iptables and tc, Nginx + Lua application‑layer protection, automated monitoring, performance tuning, and future trends.
This article walks through a systematic investigation of Linux network packet loss, covering potential loss points across the protocol stack, using tools like ethtool, netstat, iptables, tc, hping3, curl, and tcpdump to identify and resolve misconfigurations such as faulty netem rules and an incorrect MTU setting.
This article walks through a systematic Linux network packet‑loss investigation, covering every protocol layer from the NIC to the application, analyzing ethtool, netstat, tc, iptables rules, MTU settings, and finally applying fixes to restore reliable connectivity.
This guide explains DNS fundamentals, shows how to set up a Docker container for testing, demonstrates viewing and editing /etc/resolv.conf, and walks through common DNS problems such as missing configuration, slow responses, hard‑coded hosts entries, and unstable queries caused by traffic‑control or reverse‑lookup issues.
This article explains Linux traffic control fundamentals, covering the three-layer processing model, queue types, token‑bucket mechanisms, kernel TC architecture, Qdisc/Class/Filter hierarchy, and provides step‑by‑step tc CLI examples for implementing QoS, DiffServ, and enterprise networking policies.
Learn how to control Linux network traffic by creating qdisc, class, and filter rules with tc, set bandwidth limits for specific IPs or ports, and use an ifb virtual interface to shape inbound traffic, including step-by-step commands, configuration examples, and cleanup procedures.
This guide explains how to use Linux's TC tool to shape traffic by creating qdisc, class, and filter rules, allowing you to limit outbound and inbound bandwidth for specific IP addresses or ports, with step‑by‑step commands and practical examples.
This guide explains how to use Linux's TC tool with qdisc, class, and filter to shape outbound traffic, limit specific IP/Port bandwidth, and handle inbound traffic via IFB redirection, providing step‑by‑step commands and configuration examples.
Using eBPF to bypass traditional bridge, netfilter, and routing steps, this article demonstrates how container network packet forwarding can be accelerated, reducing receive and transmit latency by around 40‑82%, with detailed perf‑ftrace analysis, code examples, and performance comparisons of three forwarding modes.
This guide explains how Linux uses packet queuing for traffic shaping, walks through creating qdisc, class, and filter structures with tc, and shows step‑by‑step commands to limit bandwidth for specific IPs, ports, and inbound traffic using ifb devices.
This guide explains Linux traffic control fundamentals, showing how to create qdisc, class, and filter structures with the tc tool to shape traffic, limit bandwidth for specific IPs or ports, and manage both egress and ingress traffic using ifb devices.
This article explains TencentOS “Ruyi” network QoS, detailing its resource isolation concepts, tc+htb and cgroup configurations, performance testing, and the advantages of the Ruyi netqos scheme over traditional tc solutions for mixed online and offline container workloads.
This article presents a systematic performance test of the DTLE data replication tool, using sysbench, tc, and iperf3 to simulate different network latency and bandwidth scenarios, and compares DTLE's replication delay and bandwidth usage against native MySQL replication across three test cases.
This guide explains how to use Linux's Netem module via the tc command to emulate network conditions such as delay, loss, duplication, corruption, and packet reordering, providing practical examples and command syntax for effective testing and troubleshooting of network performance issues.
This guide explains Linux traffic control (TC), covering its core components—qdisc, classes, and filters—along with HTB hierarchy, queue disciplines, iptables marking, and step‑by‑step command examples for limiting bandwidth per interface, IP or application.
This article explains how to construct various HTTP response codes using a PHP script and how to emulate network anomalies such as TCP resets, packet loss, and latency with iptables and tc netem, providing practical techniques for robust backend testing.
This guide explains Linux traffic control (TC), covering its core components—queueing disciplines, classes, and filters—along with HTB configuration, step‑by‑step command examples, burst handling, and practical use cases for limiting bandwidth per IP or subnet.
This guide explains Linux traffic control (TC), covering its core components—queueing disciplines, classes, and filters—along with step‑by‑step commands to shape outbound bandwidth, set rate and ceiling limits, use bursts, and apply iptables marks for precise traffic management.
This guide explains Linux TC’s architecture—including qdiscs, classes, and filters—covers HTB versus CBQ, shows step‑by‑step command examples for rate limiting, priority, burst handling, and provides a concise reference of essential TC commands.
This guide explains Linux traffic control (TC), covering its core components, queueing disciplines, classes, filters, burst parameters, and provides step‑by‑step command examples to limit download speeds for individual IPs or subnets.
