Firewall rules deployed as part of the common role include built-in support for rate-limiting connections as means of preventing excessive resource usage from individual IP addresses. When the rate limit is hit, the relevant firewall rules will drop the packets and send a message to system log with dropped package details.

The logged messages are currently not easily searchable in system logs, and can be somewhat hard to locate in case other types of firewall-related messages are present. It would be better if the rate-limit messages were tagged with a short string to make them both stand out more, and to make searches easier.

The following should be done:

• Update the common role.
  • Tag all messages generated as result of rate-limiting.
• Update role reference documentation.
• Update usage instructions.
• Update release notes.