Out of the box, does VyOS (or Debian beneath it) perform any ICMP filtering or rate limiting? When trying to troubleshoot with tools like mtr, we’re noticing some interfaces in our LAN appear to be dropping packets but pings to those same interfaces are working fine. Other interfaces report no packe…

Hello @eronlloyd . It has by default 1000 sudo sysctl net.ipv4.icmp_ratelimit net.ipv4.icmp_ratelimit = 1000 You can try to increase this by the following command: set system sysctl custom net.ipv4.icmp_ratelimit value 10000

VyOS Forums

Default ICMP filtering/rate limiting

General questions

eronlloyd October 8, 2021, 2:17am 3

Thanks @Dmitry I’ll try that out and report back!