11-01-2010 02:33 AM - edited 03-11-2019 12:03 PM
Hi,
Does anyone know if with a Cisco ASA it's possible to create a policy which inspects non-HTTP traffic on port 80, and then create a class-map to rate limit matching traffic?
I've seen the http-map command - however port-misuse doesn't appear to be granular enough to match traffic other than P2P and IM.
Thanks
Solved! Go to Solution.
11-01-2010 07:28 AM
Jake,
You cannot do that. You cannot priority queue only specific HTTP commands etc. You can block reset erc based on HHTP attributes, but for LLQ (QoS), you need to match on general criteria like (all port 80 etc).
I hope it is clear.
PK
11-01-2010 05:25 AM
Hello,
Thanks for posting, what is the final pusrpose of this configuration? If we create a class map to rate limit port 80, it will do port 80 regardless of the traffic that comes on that port? Is it for any specific l7 kind of traffic?
Let me know.
Mike
11-01-2010 06:50 AM
Hi Mike,
The purpose of the configuration will be to shape - but not block - non-HTTP TCP port 80 traffic. Here's an example:
Data is received on an interface, and then processed as follows
HTTP GET, POST, HEAD etc -----> class-map with priority bandwidth allocated and placed in a low latency queue.
Application X, uses TCP 80 -----> class-map fair queue (best effort)
Both class-maps to be applied to a policy-map, and then on the interface.
Jake
11-01-2010 07:28 AM
Jake,
You cannot do that. You cannot priority queue only specific HTTP commands etc. You can block reset erc based on HHTP attributes, but for LLQ (QoS), you need to match on general criteria like (all port 80 etc).
I hope it is clear.
PK
11-02-2010 06:31 AM
I thought as much.
Thanks for your time anyway.
11-02-2010 06:54 AM
Take care,
PK
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide