bandwidth quota per Whonix-Workstation traffic feature

[phabricator-migrator]

Information

ID: 241
PHID: PHID-TASK-kebjb44g5bdgidog5t3t
Author: Patrick
Status at Migration Time: open
Priority at Migration Time: Normal

Description

Optional feature for limiting how much traffic a Whonix-Workstation may use in total per month.

Not very Whonix specific. Probably just missing documentation on how to do that with any proxy server for any client.

Comments

---

HulaHoop

2015-03-20 01:23:08 UTC

Can be done on gw with the iptables quota feature:
Netfilter Extensions HOWTO: New netfilter matches

The only reliable way to do this is on an interface basis because a malicious workstation can spoof it’s IP and bypass rules based on that.

This will then need gw to support managing multiple internal networks/interfaces.

---

Patrick

2015-03-20 09:38:03 UTC

Can be done on gw with the iptables quota feature:
Netfilter Extensions HOWTO: New netfilter matches

Command works in Debian wheezy, although I didn’t test yet if it stops if the actual quota is hit.

Adding such rules in the right place could be cumbersome. So alternative solutions are still welcome.

This will then need gw to support managing multiple internal networks/interfaces.

Not necessarily, but somewhat, yes. → T242

The only reliable way to do this is on an interface basis because a malicious workstation can spoof it’s IP and bypass rules based on that.

There are also other ways. These are documented here:
Connections between Whonix-Gateway ™ and Whonix-Workstation ™
If you wish to discuss those, please open [and link] a new forum thread[s] or new ticket[s].