Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: QoS for ADSL customers

  • From: Joe Shen
  • Date: Tue Dec 06 11:33:22 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.sg; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=gcf2jn5RIB1nvH0jo7+IkPtvZCEdWQeB/RcJS61I5Iw0HHEDYlOHzjTBJgt9Z3O9GheIK/M8pRYhS351m/Rs1SIzeUG3NPjBUzHKQkqKtV8pv8+zxM0Qno1lLTPhu+geBPpefi9J1PWZIyMwgr7FuaZ/FmgTFYvQhwsldj8fNpE= ;

Could IPtables  control traffic with inspecting layer7
information? 


As someone suggested, bandwidth allocation could be
done with TCP protocol control ( ACK dropping or so); 
How can we do that? NBAR only limit the bandwidth, and
to our experience with cisco7609 it cost a lot of cpu
time! 

Where can I find QoS experiemnt result and sample
configuration of ERX14xx?

Joe


--- Ejay Hire <ejay.hire@isdn.net> wrote:

> 
> Hello.
> 
> Going back to your original question, how to keep
> from
> saturating the network with residential users using
> bittorrent/edonkey et al, while suffocating business
> customers.  Here goes.
> 
> Netfilter/IpTables (and a slew of commercial
> products I'm
> sure) has a Layer 7 traffic classifier, meaning it
> can
> identify specific file transfer applications and set
> a
> DiffServ bit.  This means it can tell between a real
> http
> request and a edonkey transfer, even if they are
> both using
> http.  It also has rate-limiting capability.  So...
> If you
> pass all of the traffic destined for your DSL
> customers
> through an iptables box (single point of failure)
> then you
> can classify and rate-limit the downstream rate on a
> per-application basis.
> 
> Fwiw, if you are using diffserv bits, you could push
> the
> rate-limits down to the router with a qos policy in
> it
> instead of doing it all in the iptables box.
> 
> References on this..  The netfilter website (for
> classification info) and the Linux advanced router
> tools
> (LART) (qos info/rate limiting)
> 
> -e
> 
> 
> > -----Original Message-----
> > From: owner-nanog@merit.edu
> [mailto:owner-nanog@merit.edu]
> On 
> > Behalf Of Kim Onnel
> > Sent: Thursday, December 01, 2005 3:26 AM
> > To: NANGO
> > Subject: Re: QoS for ADSL customers
> > 
> > Can any one please suggest to me any commercial or
> none 
> > solution to cap the download stream traffic, our
> upstream 
> > will not recieve marked traffic from us, so what
> can be
> done ?
> > 
> > 
> > On 11/29/05, Kim Onnel <karim.adel@gmail.com>
> wrote:
> > 
> > 	Hello everyone,
> > 	
> > 	We have Juniper ERX as BRAS for ADSL, its GigE 
> > interface is on an old Cisco 3508 switch with an
> old IOS,
> its 
> > gateway to the internet is a 7609, our transit
> internet
> links 
> > terminate on GigaE, Flexwan on the 7600
> > 	
> > 	The links are now almost always fully utilized,
> we
> want 
> > to do some QoS to cap our ADSL downstream, to give
> room
> for 
> > the Corp. customers traffic to flow without pain.
> > 	
> > 	I'm here to collect ideas, comments, advises and 
> > experiences for such situations.
> > 	
> > 	Our humble approach was to collect some p2p ports
> and 
> > police traffic to these ports, but the traffic
> wasnt much,
> 
> > one other thing is rate-limiting per ADSL
> customers IPs,
> but 
> > that wasnt supported by management, so we thought
> of
> matching 
> > ADSL www traffic and doing exceed action is
> transmit, and 
> > police other IP traffic.
> > 	
> > 	Doing so on the ERX wasnt a nice experience, so
> we're 
> > trying to do it on the cisco.
> > 	
> > 	Thanks 
> > 
> > 
> > 
> 
> 



	
	
		
__________________________________ 
Do you Yahoo!? 
New and Improved Yahoo! Mail - 1GB free storage! 
http://sg.whatsnew.mail.yahoo.com




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.