RE: Traffic Management

["Paul Heber" <pheber () qantas com au>]

The other one you may wish to consider that works very well is the
Packeteer device. This does full TCP rate control by modifying the TCP
window and ack times. Again you can specify percentages of flow, plus URL
priority etc etc.

Also running as a seperate device will not load down your firewall

Regards
Paul Heber

Ph:       (+612) 9691 4545
Mobile: (+614) 1231 0945
Fax:      (+612) 9691 4660


                                                                                                                        
                             
                    "Safier, Adam                                                                                       
                             
                    (GEIO)"                     To:     Rama Kant <kant () adeptech com>, bparis () sorrentolactalis 
com, firewall-wizards () fraggle nfr net 
                    <Adam.Safier () geio ge        cc:                                                                  
                                
                    .com>                       Subject:     RE: [fw-wiz] Traffic Management                            
                             
                    Sent by:                                                                                            
                             
                    firewall-wizards-adm                                                                                
                             
                    in () nfr com                                                                                       
                                
                                                                                                                        
                             
                                                                                                                        
                             
                    13/02/2001 05:46                                                                                    
                             
                                                                                                                        
                             
                                                                                                                        
                             




Check Point offers a product called Floodgate that lets you set priority by
% or max kbps. There are several other product vendors that offer similar
products dedicated to traffic shaping/control.  Cisco routers also have a
parameter that lets you limit certain types of traffic to a max bandwidth.

If you are using a caching proxy you may be able to set a bandwidth limit
on
that proxy. The result of all these is that certain categories of traffic
(http vs. ftp vs. e-mail vs. specific ports) get throttled.  The better
solutions can specify bandwidth by protocol and source/destination so your
e-mail server to corporate HQ server can get 50% of the bandwidth while
non-corporate smtp gets 10% and http gets 5% etc.

They all require establishing a corporate policy and then setting up some
rules.

Adam

-----Original Message-----
From: Rama Kant [mailto:kant () adeptech com]
Sent: Sunday, February 11, 2001 7:34 PM
To: bparis () sorrentolactalis com; firewall-wizards () fraggle nfr net
Subject: Re: [fw-wiz] Traffic Management


You should look into bandwidth shaping solutions.  One that I have personal
experience with, used to be called AccessPoint from Xedia.  This company
was sold to Lucent over a year ago.  These routers use "Class Based
Queuing" to allocate available bandwidth based on applications as well as
IP addresses.

Cisco also has "Quality of Service" products but I found AccessPoint to be
more effective.

Good luck,
Rama Kant


At 11:55 AM 02/09/2001, bparis () sorrentolactalis com wrote:
>         Folks,
>
>         Recently we've been experiencing "congestion" of our internet
pipe.
> We've tried restricting various thing like Napster, Gnutella and the like
> with varying degrees of success, but as more and more users come onto our
> LAN/WAN we've noticed our performance decreasing. Rather than manage this
at
> our firewall (with many many rules), I'd like to know how you manage your
> traffic. What do you use?
>
>         I apologize if this question seems off topic, but thought I would
> toss it out there and see what comes back...
>
> Bill Paris
> Telecommunication/Network Analyst
> Sorrento Lactalis Inc.
> bparis () sorrentolactalis com
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards