Merhaba;

Quality of Service yeteneğine sahip network ürünlerine ihtiyacınız bulunmaktadır. Bir çok yazılım bu ihtiyacı gidermektedir fakat bunu donanım seviyesinde yapmanızı önereceğim.

About Traffic Management and QoS

To use the features described in this chapter, you must have Fireware Pro installed on your Firebox.

In a large network with many computers, the volume of data that moves through the firewall can be very large. A network administrator can use Traffic Management and Quality of Service (QoS) actions to prevent data loss for important business applications and to make sure mission-critical applications take priority over other traffic.

Traffic Management and QoS provide a number of benefits. You can:

• Guarantee or limit bandwidth


• Control the rate at which the Firebox sends packets to the network


• Prioritize when to send packets to the network

To apply traffic management to policies, you define a Traffic Management action, which is a collection of settings that you can apply to one or more policy definitions. This way you do not need to configure the traffic management settings separately in each policy. You can define additional Traffic Management actions if you want to apply different settings to different policies.

Guarantee bandwidth

Bandwidth reservation prevents connection timeouts. A traffic management queue with reserved bandwidth and low priority can give bandwidth to real-time applications with higher priority when necessary without disconnecting. Other traffic management queues can take advantage of unused reserved bandwidth when it becomes available.

For example, suppose your company has an FTP server on the external network and you want to guarantee that FTP always has at least 200 Kilobytes per second through the external interface. You might also consider setting a minimum bandwidth from the trusted interface to make sure that the connection has end-to-end guaranteed bandwidth. To do this, you would create a Traffic Management action that defines a minimum of 200 kbps for FTP traffic on the external interface. You would then create an FTP policy and apply the Traffic Management action. This will allow “ftp put” at 200 kbps. If you want to allow “ftp get” at 200 kbps, you must configure the FTP traffic on the trusted interface to also have a minimum of 200 kbps.

As another example, suppose your company uses multimedia materials (streaming media) for training external customers. This streaming media uses RTSP over port 554. You have frequent FTP uploads from the trusted to external interface, and you do not want these uploads to compete with your customers receiving streaming media. You would apply a Traffic Management action to the external interface for the streaming media port to guarantee sufficient bandwidth.

Restrict bandwidth

The guaranteed bandwidth setting works with another setting configured for each external interface, Outgoing Interface Bandwidth, to make sure you do not guarantee more bandwidth than actually exists. This setting also helps you make sure the sum of guaranteed bandwidth settings does not fill the link such that non-guaranteed traffic cannot pass. For example, suppose the link is 1 Mbps and you try to use a Traffic Management action that guarantees 973 Kbps (0.95 Mbps) to the FTP policy on that link. With these settings, the FTP traffic could prevent other types of traffic from using the interface. If you try to configure the Firebox this way, Policy Manager warns you that you are approaching the Outgoing Interface Bandwidth setting for that interface.

QoS Marking

QoS Marking creates different classes of service for different kinds of outbound network traffic. When you “mark” traffic, you change up to six bits on packet header fields defined for this purpose. QoS-capable external devices can make use of this marking and provide appropriate handling of a packet as it travels from one point to another in a network.

You can use QoS Marking on a per-interface or per-policy basis. When you define QoS Marking for an interface, packets leaving that interface are marked. QoS Marking for a policy marks traffic that uses the policy.

Traffic priority

You can assign different levels of priority either to policies or for traffic from a particular interface. Traffic prioritization at the firewall allows you to manage multiple class of service (CoS) queues and reserve the highest priority for real-time or streaming data. A policy with high priority can take bandwidth away from existing low priority connections when the link is congested and traffic is competing for bandwidth.

See also

Set connection and bandwidth limits

Set Outgoing Interface Bandwidth

About QoS Marking

Define a Traffic Management action

Merhabalar,

Allot Bandwith Management Cihazlarını bir inceleyin. Bazı ISP'ler ve Provider'lar kullanıyor diye biliyorum. Allot satış eğitimlerine katılmıştım. Cihazlar iyiye benziyordu. Distribitörü Hayat Bilgi. Yalnız menşei Israil =(

Merhaba; kullandığımız fiber internet üzerinde bandwith yönetimi yapan departmanlara belirli bant genişliği verebileceğimiz bir yazılıma veya cihaza ihtiyacımız var bu konuda yardımcı olabilirmisiniz. Linux üzerinde bunu NTOP ile şimdilik sacede izliyoruz ama yeterli gelmemekte. Linux altında çalışan bildiğiniz başka bir açık kaynak yazılım varmıdır?

Murat Alıcı

Sistem Uzmanı

Merhaba, Linux üzerinde iptables ile bunu yapailirsiniz, örnek linke bakabilirsiniz. " http://lartc.org/howto/ " " http://mikebabcock.ca/linux/qos_tc " eğer cihaz almayı düşünürseniz , çok kademeli servis, kaynak ve hedef bazı tekli ve gurup bazında QoS yapabilen Clavister cihazlarından alabilirsiniz.