Traffic Policing on ASA

[marcusbrutus]

Hi,

I was just reading about QoS on an ASA.  I just wanted to clarify whether bandwidth limiting is applied on a per flow basis or on in general.  If for example i wish to limit the bandwidth to facebook and configure a class map for the ip of facebook and a policy map to limit the bandwidth to say 256 kbps, after applying the service policy on the interface, will this effectively limit all traffic to facebook to 256 kbps?  So if all 3 users accessing facebook already consumes 256 kbps, all other users who will try to access facebook will not be able to?  Or is it on a per flow basis?

Thanks in advance.

[lcaruso · Accepted solution]

Hi,

the book I'm reading states the aggregate rate is used

Suppose a
policer has been configured to limit outbound HTTP traffic to an aggregate

rate of 8
kbps. Conforming traffic is transmitted, but traffic that exceeds the conform
rate is dropped.

Chapter 7. Inspecting Traffic. Cisco ASA, PIX, and FWSM Firewall Handbook, Second Edition