Server-Specific bandwidth limits

[alemxdev]

It would be great to be able to set how much bandwidth (for example, how many GB of internet traffic) a specific server [container] is allowed to transfer in download and upload over a defined period of time.

For example, a bandwidth limit that automatically resets every 7 days, 30 days, or any custom interval.

One possible approach could be to identify the container by its name (which I noticed remains constant, since it corresponds to the server’s UUID), and then apply traffic limits using something like nftables quotas, combined with a Docker container IP lookup (so the container can be resolved via its name/UUID to the correct IP)? And so when limit reached...just like dropping incoming and outgoing traffic for the container specific ip/interface.

This logic could then be managed by Wings, which would be responsible for tracking usage, enforcing the quota, and resetting it when the time window expires (or for the reset maybe a cronjob?).

If I were to try implementing something like this, would that be acceptable (if good after review)? And, if so, could I open a merge request to propose it upstream?

It’s just an idea, but it could be a useful feature for controlling and fairly distributing network usage across containers & preventing abuse (making network-related abuse, like users hosting DDoS tools, harder & less efficent).

[notAreYouScared]

How would wings enforce this quota? just shut the server down? Docker does not support speed limits nor network data limits.

[Lovinoes]

cant you do that with iptables? https://man7.org/linux/man-pages/man8/iptables-extensions.8.html "quota" like iptables -A FORWARD -d <container_ip> -m quota --quota <bytes> -j ACCEPT

[alemxdev]

How would wings enforce this quota? just shut the server down? Docker does not support speed limits nor network data limits.

Maybe by just starting to drop the traffic, or even shutting it down. We can attempt to use something else from docker no? if Pelican is always limited to docker features, it will probably end like pterodactyl, that when everything is there, just plugins are made from the community? Maybe like Lovinoes said,we can use iptables?

[alemxdev]

cant you do that with iptables? https://man7.org/linux/man-pages/man8/iptables-extensions.8.html "quota" like iptables -A FORWARD -d <container_ip> -m quota --quota <bytes> -j ACCEPT

Probably yes, but i never had a detailed look on that.

[rmartinoscar]

Duplicate of #1473