B. Managing BaCon Rules and Policies
In BaCon, we propose a concept of bandwidth control rules
and policies. A BaCon rule is a single action performed by
users. For example, a user may want to drop everything except
web and FTP traffic. This action is considered a single rule
although it may translate to multiple iptables commands: 1)
deny all, 2) allow port 80, 3) allow port 443, and 4) allow port
21. With this, user can manipulate the set of commands in one
click. Users can specify following attributes for each BaCon
rule: rule name*, rule description, traffic direction* (incoming,
outgoing, or both), source/destination IP address (all or a set of IP), ports or application, action* (drop or shape), rate limit
(in case of shape), scheduled date and time, and status*
(active/inactive). The attributes with * are required. The rest is
optional.