Flow-based rate limiting

A non-transitory computer-readable medium for storing instructions, the instructions comprising:

• a plurality of instructions which, when executed by one or more processors, cause the one or more processors to:
• identify a rate limit associated with a packet,
• the rate limit being identified based on layer 3 information included in the packet,
• the packet including at least three of a source address, a destination address, information identifying a source port, information identifying a destination port, or information identifying a protocol associated with the packet;
• determine, based on the packet, whether a memory stores an entry that identifies a flow corresponding to the packet,
• the memory storing one or more entries identifying one or more flows,
• one or more instructions, of the plurality of instructions, to determine whether the memory stores the entry including:
• one or more instructions to generate a flow identifier based on the at least three of the source address, the destination address, the information identifying the source port, the information identifying the destination port, or the information identifying the protocol, and
• one or more instructions to search the memory based on the flow identifier to determine whether the memory stores the entry;
• calculate a current rate associated with the flow when the memory stores the entry,
• the current rate being calculated using information, in the entry, that includes:
• information identifying a time period, and
• at least one of:
• information identifying a quantity of packets, associated with the flow, received during the time period, or
• information identifying a quantity of bytes, associated with the flow, received during the time period;
• and
• process the packet when the calculated current rate does not exceed the rate limit.

A device comprising:

• a memory to store instructions;
• and
• a processor to execute the instructions to:
• identify a rate limit associated with a packet,
• the rate limit being identified based on layer 3 information included in the packet,
• the packet including at least three of a source address, a destination address, information identifying a source port, information identifying a destination port, or information identifying a protocol associated with the packet,
• determine, based on the packet, whether the memory stores an entry that identifies a flow corresponding to the packet,
• the memory storing one or more entries identifying one or more flows,
• when determining whether the memory stores the entry, the processor is to:
• generate an identifier based on the at least three of the source address, the destination address, the information identifying the source port, the information identifying the destination port, or the information identifying the protocol, and
• search the memory based on the identifier to determine whether the memory stores the entry,
• calculate a current rate associated with the flow when the memory stores the entry,
• the current rate being calculated using information, in the entry, that includes:
• information identifying a time period, and
• at least one of:
• information identifying a quantity of packets, associated with the flow, received during the time period, or
• information identifying a quantity of bytes, associated with the flow, received during the time period, and
• discard the packet when the calculated current rate exceeds the rate limit.