10-24-2013 10:37 AM - edited 03-11-2019 07:56 PM
When we use Aspera, it maxes out our bandwidth and we cannot do anything else while the download is going on.
3220ASA1# sh conn add 192.168.0.105 prot udp
110 in use, 509 most used
UDP outside 153.7.233.153:33001 inside 192.168.0.105:60064, idle 0:00:00, bytes 573048376, flags -
I want to rate-limit the UDP port 33001 that aspera uses, here is that part of my config. I applied the QoS to both the inside and outside interface for port 33001.
ASA Version 8.6(1)
access-list outside_mpc extended permit udp any any eq 33001
access-list inside_mpc_1 extended permit udp any any eq 33001
!
class-map inside-class
match access-list inside_mpc_1
class-map outside-class
match access-list outside_mpc
!
policy-map outside-policy
class outside-class
police input 100000 1500
police output 100000 1500
policy-map inside-policy
class httptraffic
inspect http http_inspection_policy
class inside-class
police input 100000 1500
police output 100000 1500
!
service-policy outside-policy interface outside
service-policy inside-policy interface inside
Do I have this wrong? The ASDM is still showing traffic as much higher than the 100kbps I want to limit to.
10-24-2013 01:41 PM
Hello Dru,
I would actually do it like this
policy-map outside-policy
class outside-class
police output 100000 1500
policy-map inside-policy
class httptraffic
inspect http http_inspection_policy
class inside-class
police input 100000 1500
Then I would apply the service-policy and then do clear local-host
Let me know how it goes
Regards,
Jcarvaja
10-24-2013 05:14 PM
After speaking with TAC we were able to police the traffic internally but as it's UDP the source server just kept throwing the packets at us, maxing out the bandwith. I was told that the only workaround is to get the ISP to limit it.
10-24-2013 06:22 PM
Hello Dru,
What do U mean?
Who is the one that innitiates the connection, the server on the inside of an outside user???
Did u Try what I suggested?
Regards,
04-19-2016 02:09 PM
Having the same issues. Did the recommendation from Julio help you? I would like to know if this has resolved your issue.
Thanks.
Todd
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: