Limit incoming traffic on Internet connection

[Little Bunny]

Hello

We have a Cisco Nexus 9396PX with a 10GB Telus internet connection but get charged for any traffic above 6GB. What's the best way to rate-limit the amount of incoming traffic allowed on the link without dropping packets?

Thanks

LB

[Georg Pauwen]

Hello,

on the Nexus 9K, your for inbound QoS are limited.

The below drops everything inbound above 6GB:

policy-map LIMIT_6GB_IN
 class class-default
  police cir 6000000000 conform transmit violate drop

!

interface TenGigabitEthernet0/0/0
service-policy LIMIT_6GB_IN in

You can change the 'violate' action to set dscp or cos and transmit, otherwise everything above 6GB will be dropped...

[Little Bunny]

Thanks Georg. So if we limit the bandwidth incoming on our device will the amount of traffic our ISP sends to our device adjust accordingly? Or will they continue to bombard us with traffic and charge based on the amount they send?

[Joseph W. Doherty]

If the traffic is of a type that slows it transmission rate when there are drops (although your OP did ask for a solution without dropping packets - see my other post) detected (e.g. TCP), ingress rate will be throttled but you will still be paying for overages before the packets are dropped.

[Larry Sullivan]

I don't think what you're asking makes sense.  If packets aren't dropped, they are buffered.  Once the buffer is full, packets are dropped.  Buffers aren't that big.

[Joseph W. Doherty]

The "best way" would probably be to use a 3rd party traffic shaping appliance.

Without it, you might try shaping outbound TCP ACKs. (It works, but it will be difficult to obtain a precise ingress rate.)